Apparatus and method for authenticating transmitting applications in an interactive TV system

• US 5,625,693 A
• Filed: 07/07/1995
• Issued: 04/29/1997
• Est. Priority Date: 07/07/1995
• Status: Expired due to Term

• Current Assignee: OpenTV, Inc. (Kudelski SA)
• Original Assignee: Thomson Consumer Electronics Incorporated (Vantiva SA)
• Inventors: Rohatgi, Pankaj, Dureau, Vincent
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): White, Carmen D.
• Application Number:
  US08/499,280
• Time in Patent Office: 662 Days
• Field of Search: 380/25, 380/23, 380/49
• US Class Current: 713/187
• CPC Class Codes: H04N 21/235 Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2351 involving encryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/23617 by inserting additional data into a data carousel, e.g. inserting software modules into a DVB carousel arrangements for broadcast or for distribution of identical information repeatedly in broadcast distribution systems H04H20/16
• CPC Class Codes: H04N 21/435 Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8166 involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

An executable interactive program is combined with audio/video data for transmission. The program is divided into modules, similar to computer files, and a Directory Module is created which links program modules. Security for the executable application is provided by attaching a signed certificate to respective Directory Modules. The integrity of respective modules is monitored by hashing respective modules and including respective hash values in the Directory Module. A hash value of the Directory Module containing the other hash values is generated, encrypted and attached to the Directory Module. At a receiver the certificate is decoded and checked for authenticity of provider. If the certificate is authentic the program may be executed but only if receiver generated hash values of respective program modules are identical to corresponding hash values contained in the Directory Module.

Claims

1. Apparatus for receiving an executable application transmitted in modules including a Directory Module containing information about further modules, said Directory Module having at least an encrypted hash value over the Directory Module and an encrypted certificate appended, which certificate includes an identity of the application provider, said apparatus comprising:

a memory

a detector for detecting said transmitted modules and storing detected modules in memory;

means for separating said certificate from a detected Directory Module;

a decryptor for decrypting said certificate and said encrypted hash value;

a hash function element for hashing said detected Directory Modules to produce a further hash value;

a processor programmed for authenticating decrypted said certificate, and comparing decrypted said hash value with said further hash value, and if decrypted said hash value and said further hash value are equal and said certificate is authentic, permitting execution of said program.

2. The apparatus set forth in claim 1 wherein said Directory Module further includes hash values of further program modules, and said apparatus further includes:

means for accessing said hash values of further program modules from said detected Directory Module;

means for applying respective said further program modules to said hash function element for generating hash values over said further program modules; and

wherein

said processor is conditioned to compare said hash values of further program modules accessed from said Directory Module with corresponding hash values produced by said hash function element, and permitting execution of said program if at least predetermined ones of corresponding hash values are equal.

3. The apparatus set forth in claim 1 wherein said transmitted Directory Module is encrypted, and said decryptor is conditioned to decrypt said Directory Module with said application provider'"'"'s public key.

4. The apparatus set forth in claim 2 wherein said processor includes means to delete from said memory, modules for which corresponding hash values are not identical.

5. The apparatus set forth in claim 1 wherein said decryptor and said hash function element are subsumed in said processor.

6. The apparatus set forth in claim 1 wherein said detector includes forward error correcting circuitry.

7. The apparatus set forth in claim 1 wherein said transmitted executable application is transmitted in transport packets, each of which includes a service channel identifier, SCID, and scrambling flags, and said detector includes:

a programmable SCID detector for selecting transport packets having predetermined SCID'"'"'s from a multiplexed stream of transport packets; and

said apparatus further includes

a descrambler responsive to said scrambling flags, for descrambling respective packets according to respective states of said scrambling flags.

8. The apparatus set forth in claim 1 further including means for causing a display to indicate detection of signal provided by an unauthorized application provider.

9. The apparatus set forth in claim 1 further including:

a source of a digital version of predetermined text;

apparatus for preceding at least one of said modules, including the Directory Module, with said digital version of predetermined text, and wherein

said hash function element is conditioned to hash at least one of said modules preceded with said digital version of predetermined text.

10. The apparatus set forth in claim 9 wherein said predetermined text is OPENTV(™

).

11. The apparatus set forth in claim 1 wherein said Directory Module includes a signature S calculated using a RSA algorithm with modulus N and exponent e, and includes quotients Q1, Q2 derived from the signature S by division by the modulus N, and said processor is conditioned to verify said signature S using the quotients Q1 and Q2 without performing arithmetic division.

12. A method of processing executable applications which are transmitted as modules, in multiplexed packet format, said modules including a Directory Module containing information linking respective further application modules, said Directory Module having an encrypted certificate attached which contains information about the provider of the application, and which certificate is encrypted by a system provider'"'"'s private key, said method comprising;

detecting and selecting packets including a desired application, and storing payloads of respective packets as respective modules;

selecting a Directory Module with encrypted certificate attached;

decrypting the certificate with the system provider'"'"'s public key;

Comparing information in decrypted said certificate with corresponding stored data;

hashing ones of said application modules to produce module hash values;

comparing said module hash values with corresponding module hash values transmitted in said Directory Module; and

executing an application if corresponding produced and transmitted hash values are identical and decrypted information contained in said certificate is equivalent to said corresponding stored data.

13. The method set forth in claim 12 wherein said certificate includes an application providers public key and said Directory Module has a hash value of said Directory Module attached, which hash value is encrypted with said application provider'"'"'s private key, and said method further includes the steps of:

extracting said application provider'"'"'s public key from decrypted said certificate and separating encrypted said hash value from said Directory Module;

decrypting encrypted said hash value using said application provider'"'"'s public key; and

comparing decrypted said encrypted hash value with a hash value of detected said Directory Module.

14. The method set forth in claim 12 further including appending a digital form of the text OpenTv(™

) to said Directory Module prior to hashing said Directory Module, and hashing said Directory Module with said digital form of the text OpenTv(™

) appended.

15. Apparatus for transmitting executable applications comprising;

a processor for generating an executable application, and forming said application into modules containing portions of said application and a Directory Module containing information linking modules in an application;

a hash function element for performing one-way hash functions on modules of said application to produce corresponding hash values, and cooperating with said processor for inserting said hash values in said Directory Module;

a source of an application provider'"'"'s public key and a certificate signed with a private key of a system controller and including, an application provider'"'"'s identifier, and a time stamp related to one of the time of generation and the time of expiration of the certificate;

means for attaching said application provider'"'"'s public key and said certificate to said Directory Module; and

a transport processor for forming a time division multiplexed signal with said modules of said application.

16. The apparatus set forth in claim 15 further including:

encryption apparatus for encrypting a hash value of said Directory Module containing hash values of said application modules, with a private key of said application provider; and

means for attaching encrypted said hash value of said Directory Module to said Directory Module.

17. The apparatus set forth in claim 15 wherein ones of said modules are Data Modules in which data is expected to change during execution of said application, and said processor applies version numbers to respective modules, and changes the version number of a module when such module changes;

said hash function element hashes each changed version of a module to produce a new hash value and cooperates with said processor to attach said new hash value to the module to which it corresponds.

18. The apparatus set forth in claim 15 further including:

a source of a digital version of predetermined text;

a multiplexer for multiplexing said digital version of predetermined text with said Directory Module, wherein said hash function element is conditioned to hash the combination of said digital version of predetermined text and the Directory Module.

19. A method of transmitting executable applications comprising:

generating an executable application and segmenting it into modules;

forming a Directory Module including information linking respective application modules;

hashing respective-modules with a one way hash function to generate hash values for respective modules;

including hash values for respective modules in said Directory Module;

accessing a certificate including an application provider'"'"'s identity which certificate is encrypted with a system controller'"'"'s private key; and

attaching the certificate to said Directory Module, and transmitting said application.

20. The method set forth in claim 19 further including:

hashing the directory Module with hash values included therein, to generate a Directory Module hash value;

encrypting the Directory Module hash value;

attaching encrypted said Directory Module hash value to said Directory Module.

21. The method set forth in claim 19 further including:

generating a further certificate including identification of a third party provider;

encrypting the further certificate with the application provider'"'"'s private key; and

attaching encrypted said further certificate to said Directory Module.

22. The method set forth in claim 20 further including:

encrypting said Directory Module with an application provider'"'"'s private key, and transmitting said encrypted Directory Module; and

transmitting remaining application modules in plain text.

23. The method set forth in claim 19 wherein the step of including hash values in said Directory Module includes respective hash values of 128 bit length;

and

the step of attaching the certificate to said Directory Module includes attaching a Certificate including;

a 32 bit certificate descriptor or flags,

a 32 bit ID,

a 32 bit lifetime expiration descriptor,

a 32 bit file storage limit,

a 128 bit name, and

a 32 bit public key.