Process for the transmission and reception of personalized programs

• US 5,301,233 A
• Filed: 08/14/1992
• Issued: 04/05/1994
• Est. Priority Date: 08/19/1991
• Status: Expired due to Term

• Current Assignee: France Telecom Etablissement Autonome de Droit Public, Telediffusion De France SA
• Original Assignee: France Telecom Etablissement Autonome de Droit Public, Telediffusion
• Inventors: Fevrier, Pierre, Coutrot, Francoise
• Primary Examiner(s): Swann, Tod R.
• Application Number:
  US07/929,829
• Time in Patent Office: 599 Days
• Field of Search: 380/12, 380/20, 380/23, 380/25
• US Class Current: 380/239
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A process for the transmission and reception of personalized programs. The program is constituted by personalized program elements containing an identification of the recipient or addressee, the access to each program element being reserved for a single recipient and is conditioned for the possession of an access title covering the access criteria to the service and the possession of an individual identification on the part of each recipient. The access title control message enables users of the service to calculate, on the basis of the single cryptogram of a root control word and the identification of the recipient, all the personalized control words which will enable each recipient and him alone to descramble the elements relating to him.

Claims

1. Process for the transmission and reception of programs with access control to said programs, wherein:

(A) on transmission;

the programs are scrambled by a control word and access control messages are formed which in particular contain access criteria and a cryptogram of the control word,

(B) on reception;

a check is made to establish whether the access criteria are fulfilled, the control word used for scrambling is reconstituted and the received programs are descrambled,

said process being characterized in that, for addressing personalized programs to different recipients identified by identifiers,

(A) on transmission;

the control word used for scrambling the program intended for the particular recipient is obtained by personalization, with the aid of the identifier of said recipient, of a single control word called the root control word and which applies to all the recipients and only a single access control message is transmitted for all the recipients, said message more particularly containing a cryptogram of the root control word,

(B) on reception;

each recipient, with the aid of the recipient'"'"'s identifier and the access control message, reconstitutes, on the basis of the root control word, the recipient'"'"'s own personalized control word, which enables only the intended recipient to descramble the program.

2. Process according to claim 1, characterized in that it comprises the following operations:

(A) on transmission;

a) the program to be transmitted is subdivided into several (n) program elements called personalized program elements (EPP1, EPP2, . . . EPPn) intended for the same number (n) of different recipients (D1,D2, . . . Dn);

b) to each recipient (D1,D2, . . . Dn) is allocated an identifier (ID1, ID2, . . . IDn);

c) in a random manner, a control word is produced which applies to each of the recipients and called the root control word (MCR);

d) a service key (CS) is defined by a service key identifier (ICS);

e) on the basis of the root control word (MCR) and the service key (CS) an encrypting algorithm (AC) is produced for obtaining a cryptogram of the root control word (CMCR);

f) on the basis of the root control word (MCR) or the root control word cryptogram (CMCR), the identification of the recipients (ID1, ID2, . . . Idn) and the service key (CS) production takes place of a diversification algorithm (AD), which supplies individual control words for each recipient (D1,D2, . . . Dn), called personalized control words (MCP1, MCP2, . . . MCPn);

g) on the basis of personalized program elements (EPP1,EPP2 . . . EPPn) and personalized control words (MCP1, MCP2, . . . MCPn) corresponding to the different recipients (D1,D2, . . . Dn) aimed at, a scrambling of said personalized program elements (EPP1,EPP2, . . . MPPn) is performed using respectively said personalized control words (MCP1, MCP2, . . . MCPn) to obtain scrambled personalized program elements (EPP1, EPP2, . . . EPPn);

h) to these scrambled personalized program elements are added the recipient identifiers (ID1, ID2, . . . Idn) in order to form program elements (EP1, EP2, . . . EPn) individual to these different recipients;

i) access criteria (CA) are defined and which must be satisfied to have the right of using the service key (CS);

j) on the basis of the root control word cryptogram (CMCR), the service key identifier (ICS), access criteria (CA) and optionally a signature (SIGN) of said cryptogram and the access criteria, access title control messages (MCTA) are formed;

k) the program elements (EP1, EP2, . . . Epn) and the access title control messages (MCTA) are transmitted;

(B) on reception;

l) each recipient receives the program elements (EP1,EP2, . . . Epn) with their recipient identifiers (ID1, ID2, . . . Idn) and their scrambled personalized program elements (EPPE1, EPPE2, . . . EPPn) and also receives the access title control messages (MCTA);

m) a particular recipient (Di) retains the received program elements, which contain the identifier corresponding to the particular recipient (IDi), which gives the particular recipient the scrambled personalized program elements (EPPEi) intended for the particular recipient;

n) on the basis of access title control messages (MCTA), the particular recipient (Di) checks whether the access criteria (CA) are fulfilled by the particular recipient'"'"'s access title and if so, the particular recipient checks the integrity of the message by analyzing the signature if the latter has been made on transmission;

o) on the basis of the cryptogram of the root control word (CMCR), the service key (CS) and the identifier of the particular recipient, (IDi), the particular recipient (Di) produces the reverse algorithm (AC^-1) of the encrypting algorithm (AC) produced on transmission in operation e) and produces the diversification algorithm (AD) produced on transmission in operation f) for finding the particular recipient'"'"'s own personalized control word (MCPi);

p) the particular recipient (Di) then descrambles the scrambled personalized program elements (EPPEi) intended for the particular recipient and obtained after operation m) on the basis of the personalized control word (MCPi) obtained after operation o) and obtains in uncoded form the personalized program elements (EPPi) individual to the particular recipient.

3. Process according to claim 2, characterized in that:

(A) on transmission;

in order to obtain, in operation f), personalized control words (MCP1, MCP2, . . . MCPn) on the basis of the root control words (MCR), the identification of the recipients (ID1, ID2, . . . IDn) and the service key (CS), the diversification algorithm (AD) is applied to the root control word with the service key (CS) and the single address (UA) of the recipient as the diversification parameter,

(B) on reception;

to obtain, in operation o), from the cryptogram of the root control word (CMCR), the service key (CS) and the identifier (IDi), the personalized control word individual to the particular recipient (MCPi), the particular recipient (Di) starts by applying to the cryptogram the root control word (CMCR), the decrypting algorithm (AC^-1) which is the reverse of the encrypting algorithm (AC) using the service key (CS) as the parameter, which gives the particular recipient the root control word (MCR) and the particular recipient then applies to the latter the diversification algorithm (AD) using the single address (UA) as the diversification parameter, which finally gives the particular recipient the particular recipient'"'"'s individual personalized control word (MCPi).

4. Processing according to claim 2, characterized in that:

(A) on transmission;

to obtain, in operation f), the personalized control words (MCP1, MCP2, . . . MCPn) from the root control word (MCR), the recipient identifier (ID1, ID2, . . . IDn) and the service key (CS), the diversification algorithm (AD) is applied to the service key (CS) taking the single or unique address as the diversification parameter, which gives a personalized service key (CSP) and then the decrypting algorithm (AC^-1) is applied to the root control word cryptogram (CMCR) using the personalized service key (CSP) as the decrypting parameter,

(B) on reception;

to obtain, in operation o), from the root control word cryptogram (CMCR), the service key (CS) and the identifier (IDi), the personalized control word individual to the particular recipient (MCPi), the particular recipient (Di) applies the diversification algorithm (AD) to the service key (CS) with the address (UA) as the diversification parameter, which gives the particular recipient the personalized service key (CSP) and the particular recipient then applies the decrypting algorithm (AC^-1) to the root control word cryptogram (CMCR) taking the personalized service key (CSP) as the decrypting parameter, which finally gives the particular recipient the personalized control word (MCPi) individual to the particular recipient.

5. Process for the transmission of programs wherein the programs are scrambled by a control word and access control messages are formed which contain access criteria and a cryptogram of the control word,

said process being characterized in that, for addressing personalized programs to different recipients identified by identifiers, the control word used for scrambling the program intended for a particular recipient is obtained by personalization, with the aid of the identifier of said recipient, of a single control word called the root control word and which applies to all the recipients and only a single access control message is transmitted for all the recipients, said message more particularly containing a cryptogram of the root control word.

6. Process according to claim 5, characterized in that it comprises the following operations:

a) the program to be transmitted is subdivided into several (n) program elements called personalized program elements (EPP1, EPP2, . . . , EPPn) intended for the same number (n) of different recipients (D1, D2, . . . , Dn);

b) to each recipient (D1, D2, . . . , Dn) is allocated an identifier (ID1, ID2, . . . , IDn);

c) in random manner a control word is produced which applies to all the recipients and called the root control word (MCR);

d) a service key (CS) is defined by a service key identifier (ICS);

e) on the basis of the root control word (MCR) and the service key (CS) an encrypting algorithm (AC) is produced for obtaining a cryptogram of the root control word (CMCR);

f) on the basis of the root control word (MCR) or the root control word cryptogram (CMCR), the identification of the recipients (ID1, ID2, . . . , IDn) and the service key (CS) production takes place of a diversification algorithm (AD), which supplies individual control words for each recipient (D1, D2, . . . , Dn) called personalized control words (MCP1, MCP2, . . . , MCPn);

g) on the basis of personalized program elements (EPP1, EPP2, . . . , EPPn) and personalized control words (MCP1, MCP2, . . . , MCPn) corresponding to the different recipients (D1, D2, . . . , Dn) aimed at, scrambling takes place of said personalized program elements (EPP1, EPP2, . . . , EPPn) with the aid respectively of said personalized control words (MCP1, MCP2, . . . , MCPn) to obtain scrambled personalized program elements (EPP1, EPP2, . . . , EPPn);

h) to these scrambled personalized program elements are added the recipient identifiers (ID1, ID2, . . . , IDn) in order to form program elements (EP1, EP2, . . . , EPn) individual to these different recipients;

i) access criteria (CA) are defined and which must be satisfied to have the right of using the service key (CS);

j) on the basis of the root control word cryptogram (CMCR), the service key identifier (ICS), access criteria (CA) and optionally a signature (SIGN) of said cryptogram and the access criteria, access title control messages (MCTA) are formed;

k) the program elements (EP1, EP2, . . . , EPn) and the access title control messages (MCTA) are transmitted.

7. Process according to claim 6, characterized in that in order to obtain, in operation f), personalized control words (MCP1, MCP2, . . . , MCPn) on the basis of the root control words (MCR), the identification of the recipients (ID1, ID2, . . . , IDn) and the service key (CS), the diversification algorithm (AD) is applied to the root control word with the service key (CS) and the single address (UA) of the recipient as the diversification parameter.

8. Process according to claim 6, characterized in that to obtain, in operation f), personalized control words (MCP1, MCP2, . . . , MCPn) from root control word (MCR), the recipient identifier (ID1, ID2, . . . , IDn) and the service key (CS), the diversification algorithm (AD) is applied to the service key (CS) taking the single or unique address as the diversification parameter, which gives a personalized service key (CSP) and then the decrypting algorithm (AC^-1) is applied to the root control word cryptogram (CMCR) using the personalized service key (CSP) as the decrypting parameter.

9. Process for the reception of programs transmitted according to the process of claim 5, wherein a check is made to establish whether the access criteria are fulfilled, the control word used for scrambling is reconstituted and the received programs are descrambled,

said process being characterized in that each recipient, with the aid of the recipient'"'"'s identifier and the access control message, reconstitutes, on the basis of the root control word, the recipient'"'"'s own personalized control word, which enables only the intended recipient to descramble the program.

10. Process for the reception of programs transmitted according to the process of claim 6, wherein:

1) each recipient receives the program elements (EP1, EP2, . . . , EPn) with their recipient identifiers (ID1, ID2, . . . , IDn) and their scrambled personalized program elements (EPPE1, EPPE2, . . . , EPPEn) and also receives the access title control messages (MCTA);

m) a particular recipient (Di) retains, in the received program elements, those which contain the identifier corresponding to the particular recipient (IDi), which gives the particular recipient the scrambled personalized program elements (EPPEi) intended for the particular recipient;

n) on the basis of access title control messages (MCTA), the particular recipient (Di) checks whether the access criteria (CA) are fulfilled by the particular recipient'"'"'s access title and if so the particular recipient checks the integrity of the message by analyzing the signature if the latter has been made on transmission;

o) on the basis of the cryptogram of the root control word (CMCR), the service key (CS) and the particular recipient'"'"'s identifier (IDi), the particular recipient (Di) produces the reverse algorithm (AC^-1) of the encrypting algorithm (AC) produced on transmission in operation e) and produces the diversification algorithm (AD) produced on transmission in operation f) for again finding the particular recipient'"'"'s own personalized control word (MCPi);

p) the particular recipient (Di) then descrambles the scrambled personalized program elements (EPPEi) intended for the particular recipient and obtained after operation m) on the basis of the personalized control word (MCPi) obtained after operation o) and obtains in uncoded form the personalized program elements (EPPEi).

11. Process according to claim 10, wherein to obtain, in operation o), from the cryptogram of the root control word (CMCR), the service key (CS) and the identifier (IDi), the personalized control word individual to the particular recipient (MCPi), the particular recipient (Di) starts by applying to the cryptogram the root control word (CMCR), the decrypting algorithm (AC^-1) which is the reverse of the encrypting algorithm (AC) using the service key (CS) as the parameter, which gives the particular recipient the root control word (MCR) and the particular recipient then applies to the latter the diversification algorithm (AD) using the single address (UA) as the diversification parameter, which finally gives the particular recipient the particular recipient'"'"'s individual personalized control word (MCPi).

12. Process according to claim 10, wherein to obtain, in operation o), from the root control word cryptogram (CMCR), the service key (CS) and the identifier (IDi), the personalized control word individual to the particular recipient (MCPi), the particular recipient (Di) applies the diversification algorithm (AD) to the service key (CS) with the address (UA) as the diversification parameter, which gives the particular recipient the personalized service key (CSP) and the particular recipient then applies the decrypting algorithm (AC^-1) to the root control word cryptogram (CMCR) taking the personalized service key (CSP) as the decrypting parameter, which gives the particular recipient the personalized control word (MCPi) individual to the particular recipient.