Information terminal having reconfigurable memory

• US 5,742,677 A
• Filed: 04/03/1995
• Issued: 04/21/1998
• Est. Priority Date: 04/03/1995
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Scientific-Atlanta Incorporated (Cisco Systems, Inc.)
• Inventors: Pinder, Howard G., Wasilewski, Anthony John
• Primary Examiner(s): Cain, David C.
• Application Number:
  US08/415,617
• Time in Patent Office: 1,114 Days
• Field of Search: 380/3, 380/4, 380/21, 380/23, 380/25, 380/30
• US Class Current: 380/242
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04N 21/2221 being a cable television head-end CATV in broadcast systems H04H20/78
• CPC Class Codes: H04N 21/2351 involving encryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/2665 Gathering content from different sources, e.g. Internet and satellite
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4182 for identification purposes, e.g. storing user identification data, preferences, personal settings or data restricting access to computer systems by authenticating users using a predetermined code in combination with an additional device, e.g. dongle or smart card G06F21/123
• CPC Class Codes: H04N 21/426 Internal components of the client ; Characteristics thereof H04N5/44 takes precedence
• CPC Class Codes: H04N 21/4353 involving decryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/6543 for forcing some client operations, e.g. recording remote booting in general G06F9/4416
• CPC Class Codes: H04N 21/6582 Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number arrangements where receivers interact with the broadcast H04H20/38
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

An information terminal includes a secure microprocessor and secure non-volatile memory. Data such as authorization data and other service provider related data for subscription information services are certified as to source, and portions thereof decrypted as necessary by the secure processor according to a service provider key and loaded into secure non-volatile memory. The secure data is loaded by multiple service providers or by subscribers themselves, each service provider being adaptably allocated a number of non-volatile storage cells of predetermined length. In this manner, scarce non-volatile memory resources may be conserved and yet made accessible to multiple information service providers upon demand or as requirements change. Once certified by a trusted entity, several information service providers may individually change or modify the reconfigurable memory of the present invention by remote, addressed communication without the intervention of head-end apparatus. Moreover, preferably the service provider signs messages, and may privately encrypt portions of the message, including the authorization data, with its own key and the encrypted data is certified as to source and decrypted upon receipt at the secure microprocessor. In this manner, authorization transactions are protected from service pirates. Moreover, in a similar manner, service acceptance data, such as impulse pay-per-view data, may be signed by an electronic signature of the subscriber, privately encrypted as appropriate with a subscriber provided key and returned to the service provider. Once the service acceptance data is successfully received at a billing computer, the data is erased from secure terminal memory.

Claims

1. An information terminal comprising

a data receiver for receiving commands and data,

a processor for interpreting the commands and data, and

reconfigurable memory, responsive to the processor, configured to store a plurality of blocks of data in memory blocks depending on the requirements of information providers, each said information provider being allocated at least one memory block, all unallocated memory blocks being linked in an empty, said empty list for organizing said unallocated memory blocks until they are requested by said information providers.

2. An information terminal as recited in claim 1 wherein said reconfigurable memory comprises non-volatile memory.

3. An information terminal as recited in claim 1 wherein said processor comprises a secure microprocessor.

4. An information terminal as recited in claim 1 wherein said data receiver receives data individually addressed to the information terminal.

5. An information terminal as recited in claim 1 wherein said at least one memory block comprises data related to the service provider.

6. An information terminal as recited in claim 5 wherein said data related to the service provider comprises a service provider key received from the entity.

7. An information terminal as recited in claim 5 wherein said data related to the service provider comprises a service provider identifier.

8. An information terminal as recited in claim 5 wherein said data related to the service provider comprises service authorization data for an information service subscriber.

9. An information terminal as recited in claim 1 wherein said commands and data comprise a first command for receiving and storing validating key data for a service provider.

10. An information terminal as recited in claim 9 wherein said commands and data comprises a second command authorizing the terminal to receive addressed messages from the service provider.

11. An information terminal as recited in claim 1 wherein each said memory block comprises a predetermined length.

12. An information terminal as recited in claim 1 wherein said reconfigurable memory is further adapted for storing data related to certification of electronic signatures.

13. An information terminal as recited in claim 1 further comprising a message transmitter and wherein said processor is adapted for generating an electronic signature for messages for output via said message transmitter.

14. A method for reconfiguring a subscriber information terminal memory comprising the steps of

receiving a first command for storing a key certificate for a service provider,

storing said key certificate in terminal memory,

receiving a second command authorizing the information terminal to receive messages from the service provider,

receiving a third command for storing a public key for the service provider, and

storing said public key in a memory block of terminal memory for the service provider, the memory block obtained from an empty memory block list.

15. A method as recited in claim 14 wherein said third command and subsequent commands for writing authorization data are addressably transmitted from the service provider to the subscriber terminal.

16. A method as recited in claim 14 wherein said memory is secure and said authorization data is received with an electronic signature, said electronic signature certified via a secure processor prior to storage.

17. A secure terminal memory comprising a plurality of non-volatile storage cells of predetermined length, the storage cells being linked together by pointers, access to said memory controlled by a secure processor, at least one said non-volatile storage cell being allocated to a particular service provider, unallocated ones of said memory cells being preserved in an empty list.

18. A secure processor including a secure terminal memory as recited in claim 17, said secure processor for receiving communications from the particular service provider including an electronic signature and writing authorization data into the secure terminal memory upon communication certification.

19. A secure processor including a secure terminal memory as recited in claim 17, the processor for outputing service provider related data for transmittal with a subscriber electronic signature to the particular service provider.

20. A secure processor as recited in claim 19 wherein said service provider related data comprises service purchase data.

21. A method of communicating subscription information service related data for use in a subscription information system comprising the steps of

storing a key certificate at a trusted entity,

certifying to a subscription information terminal the identity of a subscription information service provider, and

responsive to the certification step, receiving messages at the subscription information terminal from the information service provider.

22. A method as recited in claim 21 wherein said messages from the information service provider include data encrypted according to a key of the information service provider and said messages are decrypted within a secure processor of the subscription information terminal.

23. A method as recited in claim 21 further comprising the steps of generating messages for transmission to the information service provider, the messages including an electronic signature of the subscriber.

24. A method as recited in claim 21 further comprising the subsequent steps of receiving at the service provider a message from the terminal, certifying the message as to its source and decrypting encrypted portions of the message that are received.