METHOD AND SYSTEM FOR SECURE PROCESSING A STREAM OF ENCRYPTED DIGITAL AUDIO/VIDEO DATA

• US 20140373042A1
• Filed: 05/07/2014
• Published: 12/18/2014
• Est. Priority Date: 05/07/2013
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Nagravision SA (Kudelski SA)
• Inventors: LE PELERIN, Alain
• Granted Patent: US 9,215,505 B2
• Time in Patent Office: Days
• US Class Current: 725/31
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4348 Demultiplexing of additional data and video streams
• CPC Class Codes: H04N 21/4353 involving decryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/439 Processing of audio elementary streams
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08

Abstract

Method and system to prevent control words sharing. The system comprises a receiver capable of processing a digital data stream. The receiver, having a video descrambler device, is coupled to a primary and secondary secure device. The digital data stream comprises video content data scrambled by a first algorithm using a control word, audio content data encrypted with a secret second algorithm using a system key, and encrypted control messages comprising the control word. The primary secure device decrypts the control message and obtains the control word. The video descrambler device uses this control word to descramble the video content data. The secondary secure device comprises a decryption device which decrypts the encrypted audio content data and a watermarking module configured to add a watermark to the decrypted audio content data and return watermarked decrypted audio content data to the receiver.

Claims

1. A method for processing a digital data stream comprising video content data scrambled by a first algorithm using at least one control word, and audio content data encrypted by a second algorithm using a system key, said digital data stream further comprising encrypted control messages containing the at least one control word, the digital data stream being input by a receiver comprising a video descrambler device, the receiver being coupled to a primary secure device and a secondary secure device, the method comprising the steps of:

extracting by the receiver a control message from the digital data stream;

transmitting to the primary secure device the extracted control message;

receiving a decrypted control word by the receiver from the secondary secure device;

descrambling the video content data using the first algorithm and the control word;

transmitting to the secondary secure device the encrypted audio content data;

receiving the watermarked decrypted audio content data by the receiver from the secondary secure device; and

outputting by the receiver the descrambled video content data and the watermarked decrypted audio content data to a display device.

2. The method according to claim 1 wherein the control message further comprises access conditions, the primary secure device verifies the access conditions received from the control message by comparing the access conditions with access rights retrieved from an access rights database stored in a memory of the receiver or in a memory of the primary secure device, the control word being obtained after a successful verification of the access conditions.

3. The method according to claim 2, wherein the secondary secure device verifies the access conditions forwarded by the receiver by comparing the access conditions with access rights retrieved from an access rights database stored in a memory of the receiver or in a memory of the secondary secure device, the encrypted audio content data being decrypted after a successful verification of the access conditions.

4. The method according to claim 3, wherein the control message comprises distinct access conditions for the video content data and for the audio content data.

5. The method according to claim 3, wherein the receiver converts the access conditions received from the control message into a format acceptable by the secondary secure device before forwarding to the secondary secure device.

6. The method according to claim 1, wherein the digital data stream comprises control messages containing the system key or necessary information for generating the system key by the secondary secure device, the control messages, ignored by the primary secure device, being processed only by the secondary secure device for obtaining the system key.

7. The method according to claim 1, wherein the digital data stream comprises control messages containing the control word and the system key or information for generating the system key, the control messages being forwarded by the receiver to both the primary and secondary secure devices for extracting respectively the control word and the system key.

8. The method according to claim 1, wherein the digital data stream comprises management messages providing, in addition to rights updates, the system key to the secondary secure device or necessary information for generating the system key, and information or parameters concerning the second decryption algorithm.

9. The method according to claim 1, wherein the system key and the second decryption algorithm are embedded in the secondary secure device at manufacturing of said secondary secure device during a personalization phase.

10. The method according to claim 1, wherein the watermarked decrypted audio content data is re-encrypted by the secondary secure device with a unique key and algorithm known only by a given receiver, the re-encrypted watermarked decrypted audio content data being returned to the receiver by the secondary secure device.

11. The method according to claim 10, wherein the unique key is determined based on identifiers of the secondary secure device and of the receiver during a first connection of the receiver to the secondary secure device, the key being stored either in a memory of the receiver or in a memory of the secondary secure device and being mutually exchanged.

12. A system for processing a digital data stream, the system comprising:

a receiver having a video descrambler device, the receiver being coupled to a primary secure device and to a secondary secure device, the digital data stream comprising video content data scrambled by a first algorithm using a control word, audio content data encrypted by a second algorithm using a system key and related encrypted control messages comprising the control word, wherein;

the receiver is configured to receive the digital data stream, extract a control message from said digital data stream, and transmit to the primary secure device the extracted control message;

the primary secure device is configured to decrypt the control message, obtain the control word from the control message, and transmit the control word to the video descrambler device of the receiver;

the secondary secure device is configured to receive the encrypted audio content data from the receiver and comprises a decryption device configured to decrypt the audio content data using the second algorithm and the system key previously implemented in the secondary secure device, and a watermarking module configured to add a watermark to the decrypted audio content data and return the watermarked decrypted audio content data to the receiver;

the receiver being further configured to output to a display device the descrambled video content data and the watermarked decrypted audio content data provided by the secondary secure device.

13. The system according to claim 12, wherein the control message further comprises access conditions, the primary secure device is further configured to verify the access conditions received from the control message by comparing the access conditions with access rights retrieved from an access rights database stored in a memory of the receiver or in a memory of the primary secure device, the control word being obtained after a successful verification of the access conditions.

14. The system according to claim 13, wherein the secondary secure device is further configured to verify the access conditions forwarded by the receiver by comparing the access conditions with access rights retrieved from an access rights database stored in a memory of the receiver or in a memory of the secondary secure device, the encrypted audio content data being decrypted after a successful verification of the access conditions.

15. The system according to claim 14, wherein the control message comprises distinct access conditions for the video content data and for the audio content data.

16. The system according to claim 14, wherein the receiver comprises a converter configured to convert the access conditions received from the control message into a format acceptable by the secondary secure device.

17. The system according to claim 12, wherein the digital data stream comprises control messages containing the system key or information for generating the system key by the secondary secure device, the secondary secure device being further configured to process the control messages for obtaining the system key, the primary secure device ignoring the control messages.

18. The system according to claim 12, wherein the digital data stream comprises control messages containing the control word and the system key or information for generating the system key, the receiver being configured to forward the control messages to both the primary and secondary secure devices for extracting respectively the control word and the system key.

19. The system according to claim 12, wherein the digital data stream comprises management messages providing, in addition to rights updates, the system key to the secondary secure device or information for generating the system key, and information or parameters concerning the second decryption algorithm.

20. The system according to claim 12, wherein the system key and the second decryption algorithm are embedded in the secondary secure device at manufacturing of said secondary secure device during a personalization phase.

21. The system according to claim 12, wherein the secondary secure device is further configured to re-encrypt the watermarked decrypted audio content data with a unique key and algorithm known only by a given receiver, and to return the re-encrypted watermarked decrypted audio content data to the receiver, the unique key being based on identifiers of the secondary secure device and of the receiver and stored in a memory of the receiver and in a memory of the secondary secure device.

22. The system according to claim 12, wherein the primary and the secondary secure device are smartcards implemented on a single physical security device locally connected to the receiver.

23-24. -24. (canceled)

25. A conditional access module configured to be locally connected to a receiver, the receiver being configured to receive a digital data stream comprising video content data scrambled by a first algorithm using a control word, audio content data encrypted by a second algorithm using a system key and related encrypted control messages comprising the control word, and to extract a control message from said digital data stream, the conditional access module comprising:

a primary secure device configured to decrypt the control message, obtain the control word from the control message, and to transmit the control word to a video descrambler device included in the receiver; and

a secondary secure device configured to receive the encrypted audio content data from the receiver, the secondary secure device comprising a decryption device configured to decrypt the audio content data with the second algorithm by using the system key and a watermarking module configured to add a watermark to the decrypted audio content data and to return the watermarked decrypted audio content data to the receiver, the receiver being further configured to output to a display device the descrambled video content data and the watermarked decrypted audio content data.

26. The conditional access module according to claim 25, wherein the primary secure device and the secondary secure device are each implemented as a smartcard inserted in said conditional access module.