METHOD FOR CONTROLLING ACCESS TO A SCRAMBLED DIGITAL CONTENT

• US 20100024043A1
• Filed: 12/17/2007
• Published: 01/28/2010
• Est. Priority Date: 12/19/2006
• Status: Abandoned Application

• Current Assignee: Viaccess
• Original Assignee: Viaccess
• Inventors: Neau, Louis
• Application Number:
  US12/519,142
• Publication Number:
  US 20100024043A1
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/23476 by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/44055 by partially decrypting, e.g. decrypting a video stream that has been partially encrypted
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A method for controlling access by a secret key K to a scrambled digital content distributed, along with the security data D(K) calculated on the basis of K, by an operator equipped with a content server and an access-rights server to at least one receiving terminal comprising a plurality of access-control modules, each access-control module implementing a specific technology for determining the secret key K. The rights server prior to distribution incorporates into said security data D(K) a selection criterion for selecting an access-control module from among the plurality of the terminal'"'"'s access-control modules to process said security data D(K), after which when one of said access-control modules receives said security data D(K), said access-control module analyses the data D(K) to obtain said selection criterion and, on the basis of its value, terminates processing the data D(K) in order to attempt to obtain the secret key K or transmits a portion or the entirety of said security data D(K) to at least one of the other access-control modules.

Claims

1. A method for controlling access to a digital content scrambled by a secret key K and distributed by an operator, said operator being equipped with a content server and a rights server, to at least one receiving terminal comprising a plurality of access-control modules, each access-control module implementing a specific technology for determining the secret key K,

in which:

the content server transmits the scrambled content to the terminal,

the rights server transmits to the terminal the security data D(K) previously defined according to the secret key K,

a method characterised in that;

prior to broadcasting, the licence server incorporates into the security data D(K) a selection criterion permitting at least one of the access-control modules among the terminal'"'"'s different access-control modules to decide to process the data D(K) alone in order to attempt to obtain the secret key K or to transmit at least a portion of the data to one of the terminal'"'"'s other access-control modules.

when one of said access-control modules receives said security data D(K), said access-control module;

analyses the data D(K) to obtain said selection criterion and, based on its value,

terminates the data D(K) processing in order to obtain the secret key K,

or transmits a portion or the totality of said security data D(K) to at least one of the other access-control modules.

2. A method according to claim 1 in which said selection criterion can be deduced from the syntax of said security data D(K).

3. A method according to claim 1 in which said selection criterion is a bit or a group of bits among the security data D(K).

4. A method according to claim 1 in which the scrambled content and the security data are respectively transmitted to the terminal by the content server and by the rights server simultaneously or asynchronously.

5. A method according to claim 1 in which the security data D(K) comprise at least one ECM and/or at least one DRM licence.

6. A method according to claim 5 in which the ECM message is encapsulated in the DRM licence.

7. A method according to claim 1 in which said security data set D(K) moreover comprises an EMM message intended to update or register a key or an access right into a non-volatile storage device of said terminal.

8. A method according to claim 1 in which the security data D(K) are entirely or partially encrypted.

9. System for controlling access to a scrambled digital content supplied by an operator to a receiving terminal having a plurality of separate access-control modules, each access-control module implementing a specific technology for determining the secret key K, said system comprising:

a content server having means to scramble the content by means of a secret key K,

a rights server having means to calculate the security data D(K) according to the secret key K, said system characterised in that;

the rights server comprises moreover means for incorporating into the security data D(K) a selection criterion permitting at least one of the access-control modules among the different access-control modules of the terminal to decide to process the data D(K) alone in order to attempt to obtain the secret key K or to transmit at least a portion of the data to one of the terminal'"'"'s other access-control modules.

10. Receiving terminal for receiving from an operator a scrambled content by means of a secret key K, said terminal having a plurality of separate access-control modules, each access-control module implementing a specific technology for determining said secret key K, and said terminal furthermore receiving from said operator security data D(K) comprising a selection criterion for selecting one access-control module from among the plurality of the terminal'"'"'s access-control modules, characterised in that:

one of said access-control modules comprises means for analysing said selection criterion so as to determine whether to process the data D(K) alone in order to attempt to obtain the secret key K or to transmit at least a portion of the data to one of the terminal'"'"'s other access-control modules.

11. A terminal according to claim 10, said terminal comprising two access-control modules, wherein the first module is a DRM (digital rights management) agent and the second module is a conditional-access module.

12. A terminal according to claim 11 comprising a smart card as a security processor.

13. A computer program recorded on a medium and, when run by a computer, intended to implement a method for controlling access to a digital content scrambled by a secret key K and distributed by an operator, said operator being equipped with a content server and a rights server, to at least one receiving terminal comprising a plurality of access-control modules, each access-control module implementing a specific technology for determining the secret key K,

in which:

the content server transmits the scrambled content to the terminal,

the rights server transmits to the terminal the security data D(K) previously defined according to the secret key K,

prior to broadcasting, the licence server incorporates into the security data D(K) a selection criterion permitting at least one of the access-control modules among the terminal'"'"'s different access-control modules to decide to process the data D(K) alone in order to attempt to obtain the secret key K or to transmit at least a portion of the data to one of the terminal'"'"'s other access-control modules.

when one of said access-control modules receives said security data D(K), said access-control module;

analyses the data D(K) to obtain said selection criterion and, based on its value,

terminates the data D(K) processing in order to obtain the secret key K,

or transmits a portion or the totality of said security data D(K) to at least one of the other access-control modules;

practiced in a receiving terminal for receiving from an operator a scrambled content by means of a secret key K, said terminal having a plurality of separate access-control modules, each access-control module implementing a specific technology for determining said secret key K, and said terminal furthermore receiving from said operator security data D(K) comprising a selection criterion for selecting one access-control module from among the plurality of the terminal'"'"'s access-control modules.