Apparatus and method for access control

• US 5,461,675 A
• Filed: 09/14/1993
• Issued: 10/24/1995
• Est. Priority Date: 09/14/1992
• Status: Expired due to Term

• Current Assignee: UQE LLC
• Original Assignee: Thomson Consumer Electronics SA (Vantiva SA)
• Inventors: Diehl, Eric, Naccache, David
• Primary Examiner(s): Barron, Jr., Gilberto
• Application Number:
  US08/121,599
• Time in Patent Office: 770 Days
• Field of Search: 380/16, 380/23, 235/380
• US Class Current: 380/229
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

In a system for controlling access to signals such as pay-TV signals, the signals include data packets that are received and by a decoder and forwarded to a smart card for access authorization processing. The data packets contain information that updates entitlement or access authorization data inside the smart card. Time-related data is added to the data packets. The smart card checks to determine if the time-related data evolves between two successive packets. If not, the smart card inhibits the delivering of descrambling parameters to the decoder.

Claims

1. A method of controlling access to information included in a signal having an entitlement component including entitlement data indicating an access entitlement status of a user, said method comprising the steps of:

receiving said signal in a decoder for decoding a portion of said information in said signal other than said entitlement component in response to an access authorization signal, and for separating said entitlement component from said signal;

transmitting said separated entitlement component front said decoder to a device for establishing access entitlement status of a user in response to said entitlement data;

checking in said device to determine if said entitlement data evolves in a predetermined manner between two occurrences of said entitlement data, wherein said entitlement data includes a copy of a portion of scrambling data included in said signal for establishing said predetermined manner of evolution;

generating in said device said access authorization signal to enable decoding of said portion of said signal only if said entitlement data evolves in said predetermined manner.

2. The method of claim 1 comprising the further steps of:

checking in said device to determine if said entitlement data is received during a predetermined time period;

generating said access authorization signal only if said entitlement data is received during said predetermined time period.

3. The method of claim 1 wherein said entitlement data includes a transcription of the current local time for establishing said predetermined manner of evolution.

4. The method of claim 1 wherein said wherein

said device comprises a smart card;

said signal includes scrambled video and/or audio signals together with cryptographically protected data; and

said access authorization signal comprises descrambling information for enabling said decoder to decode said scrambled signals.

5. The method of claim 1 wherein said entitlement data includes time information, and said predetermined manner of evolution comprises said time information during a particular occurrence of said entitlement data being not less than said time information during a previous occurrence of said entitlement data.

6. A method of controlling access to information included in a signal having an entitlement component including entitlement data indicating an access entitlement status of a user, said method comprising the steps of:

receiving said signal in a decoder for decoding a portion of said information in said signal other than said entitlement component in response to an access authorization signal, and for separating said entitlement component from said signal;

transmitting said separated entitlement component from said decoder to a device for establishing access entitlement status of a user in response to said entitlement data;

checking in said device to determine if said entitlement data evolves in a predetermined manner between two occurrences of said entitlement data, wherein said predetermined manner of evolution comprises time information during a particular occurrence of said entitlement data being not less than said time information during a previous occurrence of said entitlement data;

generating in said device said access authorization signal to enable decoding of said portion of said signal only if said entitlement data evolves in said predetermined manner.

7. The method of claim 6 wherein said entitlement data includes a transcription of the current local time for establishing said predetermined manner of evolution.

8. The method of claim 6 wherein said entitlement data includes a copy of a portion of scrambling data included in said signal for establishing said predetermined manner of evolution.

9. The method of claim 6, comprising the further steps of:

checking in said device to determine if said entitlement data is received during a predetermined time period;

generating said access authorization signal only if said entitlement data is received during said predetermined time period.

10. The method of claim 6 wherein

said device comprises a smart card;

said signal includes scrambled video and/or audio signals together with cryptographically protected data; and

said access authorization signal comprises descrambling information for enabling said decoder to decode said scrambled signals.

11. Apparatus for controlling access to information included in a signal having an entitlement component including entitlement data indicating an access entitlement status of a user, said apparatus comprising:

a decoder for receiving said signal, for decoding a portion of said information in said signal other than said entitlement component in response to an access authorization signal, and for separating said entitlement component from said signal; and

means coupled to said decoder for receiving said entitlement component and for evaluating said entitlement data to establishing said access entitlement status of said user;

wherein

said evaluating means generates said access authorization signal only if said entitlement data evolves in a predetermined manner between two occurrences of said entitlement data, and wherein

said entitlement data includes a copy of a portion of scrambling data included in said signal for establishing said predetermined manner of evolution.

12. The apparatus of claim 11 wherein said evaluating means generates said access authorization signal only if said entitlement data is received during a predetermined time period.

13. The apparatus of claim 11 wherein said entitlement data includes a transcription of the current local time for establishing said predetermined manner of evolution.

14. The apparatus of claim 11 wherein said evaluating means comprises a smart card;

said signal includes scrambled video and/or audio signals together with cryptographically protected data; and

said access authorization signal comprises descrambling information for enabling said decoder to decode said scrambled signals.

15. The apparatus of claim 11 wherein said entitlement data includes time information, and said predetermined manner of evolution comprises said time information during a particular occurrence of said entitlement data being not less than said time information during a previous occurrence of said entitlement data.

20. The apparatus of claim 12 wherein

said evaluating means comprises a smart card;

said signal includes scrambled video and/or audio signals together with cryptographically protected data; and

said access authorization signal comprises descrambling information for enabling said decoder to decode said scrambled signals.

16. Apparatus for controlling access to information included in a signal having an entitlement component including entitlement data indicating an access entitlement status of a user, said apparatus comprising:

a decoder for receiving said signal, for decoding a portion of said information in said signal other than said entitlement component in response to an access authorization signal, and for separating said entitlement component from said signal; and

means coupled to said decoder for receiving said entitlement component and for evaluating said entitlement data to establishing said access entitlement status of said user;

wherein

said evaluating means generates said access authorization signal only if said entitlement data evolves in a predetermined manner between two occurrences of said entitlement data, and wherein

said predetermined manner of evolution comprises time information during a particular occurrence of said entitlement data being not less than said time information during a previous occurrence of said entitlement data.

17. The apparatus of claim 16 wherein said entitlement data includes a transcription of the current local time for establishing said predetermined manner of evolution.

18. The apparatus of claim 16 wherein said entitlement data includes a copy of a portion of scrambling data included in said signal for establishing said predetermined manner of evolution.

19. The apparatus of claim 16 wherein said evaluating means generates said access authorization signal only if said entitlement data is received during a predetermined time period.