System for securing access to data streams

• US 20110103582A1
• Filed: 01/03/2011
• Published: 05/05/2011
• Est. Priority Date: 04/13/2003
• Status: Abandoned Application

• Current Assignee: NDS Limited (Cisco Systems, Inc.)
• Original Assignee: NDS Limited (Cisco Systems, Inc.)
• Inventors: Stroh, Uri, Kamins, Josh, Wachtfogel, Abraham, Ickowicz, Gabi, Bogot, Carmi, Wald, Stephanie, Belenky, Yaacov
• Application Number:
  US12/930,304
• Publication Number:
  US 20110103582A1
• Time in Patent Office: Days
• US Class Current: 380/217
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4147 PVR [Personal Video Recorder] H04N5/76 takes precedence ; arrangements for broadcast with accumulation-type receivers H04H20/40
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10

Abstract

A method and an apparatus for protecting digital content, in which an output format for received compressed encrypted digital content is determined based, at least in part, on a rule determining whether clear compressed output format is allowed. When the clear compressed output format is not allowed, the content is received in a form in which it has been encrypted by at least two different encryption methods, and processing of the content comprises a combination of decrypting in accordance with one of the encryption methods and decompression in an atomic operation.

Claims

1-47. -47. (canceled)

48. A method for protecting digital content, the method comprising:

receiving compressed encrypted digital content;

determining an output format based, at least in part, on a rule determining whether a clear compressed output format is allowed; and

processing the compressed encrypted digital content so that any output produced will conform with the determined output format;

wherein, when the rule does not allow the clear compressed output format, (a) the compressed encrypted digital content is received in a form in which the compressed encrypted digital content has been encrypted by at least a first encryption method and a second encryption method, and (b) the processing step comprises a combination of decrypting in accordance with the second encryption method and decompressing, the decrypting and decompressing combination being an atomic operation so that the decrypting and decompressing can be performed only together and cannot be performed separately.

49. The method according to claim 48, wherein the processing step is performed in a hardware device.

50. The method according to claim 49,

wherein the hardware device is characterized by a device profile;

and

wherein the determined output format is based, in part, on the device profile.

51. The method according to claim 49, wherein the determining step is performed in the hardware device.

52. The method according to claim 49, wherein a single integrated circuit comprises the hardware device.

53. The method according to claim 52, wherein a smart card comprises the single integrated circuit.

54. The method according to claim 48, further comprising:

rendering an output sensible to at least one human sense.

55. The method according to claim 54, wherein the rendering comprises at least one of the following:

audio rendering;

visual rendering; and

audio/visual rendering.

56. The method according to claim 48, further comprising:

applying local scrambling to the content.

57. The method according to claim 48, wherein the determined output format is based, in part, on a digital content owner/controller usage rule, the digital content owner/controller usage rule comprising a copy control state selected from a group consisting of:

(a) Copy Freely;

(b) Copy One Generation; and

(c) Copy Never.

58. An apparatus for protecting digital content, the apparatus comprising:

a digital content receiver for receiving compressed encrypted digital content;

an output format determination unit for determining an output format based, at least in part, on a rule determining whether a clear compressed output format is allowed; and

a processor for processing the compressed encrypted digital content so that any output produced will conform with the determined output format;

wherein, when the rule does not allow the clear compressed output format, (a) the compressed encrypted digital content is received in a form, in which the compressed encrypted digital content has been encrypted by at least a first encryption method and a second encryption method, and (b) the processing comprises a combination of decrypting in accordance with the second encryption method and decompressing, the decrypting and decompressing combination being an atomic operation so that the decrypting and decompressing can be performed only together and cannot be performed separately.

59. The apparatus according to claim 58, further comprising:

a hardware device;

wherein the hardware device comprises the processor.

60. The apparatus according to claim 59,

wherein the hardware device is characterized by a device profile, and

wherein the determined output format is based, in part, on the device profile.

61. The apparatus according to claim 59, wherein the hardware device further comprises the output format determination unit.

62. The apparatus according to claim 59, wherein a single integrated circuit comprises the hardware device.

63. The apparatus according to claim 62, wherein a smart card comprises the single integrated circuit.

64. The apparatus according to claim 58, further comprising:

a rendering device for rendering an output sensible to at least one human sense.

65. The apparatus according to claim 64, wherein the rendering device comprises at least one of the following:

an audio rendering device;

a visual rendering device; and

an audio/visual rendering device.

66. The apparatus according to claim 58, further comprising:

a local scrambler for applying local scrambling to the content.

67. The apparatus according to claim 58 wherein the determined output format is based, in part, on a digital content owner/controller usage rule, the digital content owner/controller usage rule comprising a copy control state selected from a group consisting of:

(a) Copy Freely;

(b) Copy One Generation; and

(c) Copy Never.