Method and apparatus for an adapter card providing conditional access in a communication system

• US 6,131,160 A
• Filed: 04/09/1999
• Issued: 10/10/2000
• Est. Priority Date: 11/14/1994
• Status: Expired due to Term

• Current Assignee: Hughes Network Systems LLC (Echostar Corporation)
• Original Assignee: Hughes Electronics Corporation (AT&T, Inc.)
• Inventors: Dillon, Douglas M., Cassagnol, Robert D.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US09/288,986
• Time in Patent Office: 550 Days
• Field of Search: 713/162, 380/278
• US Class Current: 713/162
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04B 7/18523 Satellite systems for providing broadcast service to terrestrial stations, i.e. broadcast satellite service arrangements specially adapted for satellite broadcast receiving H04H40/90; picture transmission via satellite H04N1/00103; television transmission via satellite H04N7/20
• CPC Class Codes: H04B 7/18593 Arrangements for preventing unauthorised access or for providing user protection arrangements for secret or secure communication H04L9/00
• CPC Class Codes: H04H 20/74 of satellite networks
• CPC Class Codes: H04H 40/18 Arrangements characterised by circuits or components specially adapted for receiving
• CPC Class Codes: H04H 40/90 specially adapted for satellite broadcast receiving
• CPC Class Codes: H04H 60/15 on receiving information
• CPC Class Codes: H04H 60/23 using cryptography, e.g. encryption, authentication, key distribution
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04N 21/4143 embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/426 Internal components of the client ; Characteristics thereof H04N5/44 takes precedence
• CPC Class Codes: H04N 21/436 Interfacing a local distribution network, e.g. communicating with another STB or one or more peripheral devices inside the home
• CPC Class Codes: H04N 21/43607 Interfacing a plurality of external cards, e.g. through a DVB Common Interface [DVB-CI]
• CPC Class Codes: H04N 21/4623 : Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/6143 : involving transmission via a satellite
• CPC Class Codes: H04N 7/163 : by receiver means only
• CPC Class Codes: H04W 8/04 : Registration at HLR or HSS [Home Subscriber Server]

Abstract

A method and apparatus for an adapter card, for use in a computer, to provide conditional access by the computer to incoming data streams while maintaining the security of information by maintaining a listing of addresses corresponding to data streams which the computer is authorized to receive, receiving and determining the address of a frame, determining whether the frame address matches an address maintained in an Access Table, and processing and transmitting only those frames of data streams which the computer is authorized to receive.

Claims

1. An apparatus comprising:

a receiving unit configured to receive frames from a satellite antenna, wherein each frame corresponds to one of a plurality of different data streams, wherein each of the plurality of different data streams is encrypted with a different key, and wherein each frame comprises (a) identifying information uniquely identifying that one of the plurality of different data streams to which the frame corresponds and (b) encrypted data for decryption using a key obtained in accordance with the identifying information; and

an output unit configured to determine in accordance with the identifying information of a frame received by said receiving unit whether or not a key is available to decrypt the encrypted data of the frame, and where available to output decrypted data, obtained from the encrypted data of the frame by using the key, through a bus interface to a computer for further processing by the computer.

2. An apparatus according to claim 1, wherein said apparatus is an adapter card connectable to the computer.

3. An apparatus according to claim 1, wherein said output unit interrupts the computer to inform the computer that the decrypted data is ready to be retrieved by the computer.

4. An apparatus according to claim 1, wherein where a key is not available to decrypt the encrypted data of the frame, the encrypted data of the frame is prevented from being output to the computer.

5. An apparatus according to claim 1, wherein the key is stored in said apparatus in a decrypted form only within an ASIC of said apparatus.

6. An apparatus according to claim 1, wherein said receiving unit receives frames from the satellite antenna by receiving a signal in which frames of the plurality of different data streams are multiplexed.

7. An apparatus according to claim 1, wherein said output unit determines in accordance with the identifying information of a frame received by said receiving unit whether or not a key is available to decrypt the encrypted data of the frame by comparing the identifying information to stored information providing a correspondence between identifying information and a key used to decrypt the encrypted data of the frame.

8. An apparatus according to claim 7, wherein the stored information is provided in a table having plural entries, each entry providing a correspondence between identifying information and a key used to decrypt the encrypted data of the frame, and each entry corresponding to a respective one of a plurality of different data streams.

9. A method comprising:

receiving frames from a satellite antenna, wherein each frame corresponds to one of a plurality of different data streams, wherein each of the plurality of different data streams is encrypted with a different key, and wherein each frame comprises (a) identifying information uniquely identifying that one of the plurality of different data streams to which the frame corresponds and (b) encrypted data for decrytion using a key obtained in accordance with the identifying information;

determining in accordance with the identifying information of a frame receiving in said receiving step whether or not a key is available to decrypt the encrypted data of the frame, and where available outputting decrypted data, obtained from the encrypted data of the frame by using the key, through a bus interface to a computer for further processing by the computer.

10. A method according to claim 9, wherein said method is effected by an adapter card connectable to the computer.

11. A method according to claim 9, wherein said outputting step comprises a step of interrupting the computer to inform the computer that the decrypted data is ready to be retrieved by the computer.

12. A method according to claim 9, wherein where a key is not available to decrypt the encrypted data of the frame, the encrypted data of the frame is prevented from being output to the computer.

13. A method according to claim 9, wherein the key is stored in an apparatus used to effect said method in a decrypted form only within an ASIC of the apparatus.

14. A method according to claim 9, wherein said receiving unit receives frames from the satellite antenna by receiving a signal in which frames of the plurality of different data streams are multiplexed.

15. A method according to claim 9, wherein said determining step determines in accordance with the identifying information of a frame received by said receiving step whether or not a key is available to decrypt the encrypted data of the frame by comparing the identifying information to stored information providing a correspondence between identifying information and a key used to decrypt the encrypted data of the frame.

16. A method according to claim 15, wherein the stored information is provided in a table having plural entries, each entry providing a correspondence between identifying information and a key used to decrypt the encrypted data of the frame, and each entry corresponding to a respective one of a plurality of different data streams.

17. An apparatus comprising:

a receiving unit configured to receive frames from a satellite antenna, wherein each frame corresponds to one of a plurality of different data streams, wherein each of the plurality of different data streams is encrypted with a different key, and wherein each frame comprises (a) identifying information uniquely identifying that one of the plurality of different data streams to which the frame corresponds and (b) encrypted data for decryption using a key obtained in accordance with the identifying information; and

a determining unit configured to determine accordance with the identifying information of a frame whether or not a key is available to decrypt the encrypted data of the frame,

wherein said apparatus is an adapter card connectable to a computer.

18. An apparatus according to claim 17, wherein where a key is not available to decrypt the encrypted data of the frame, the encrypted data of the frame is prevented from being output to the computer.

19. An apparatus according to claim 17, wherein the key is stored in said apparatus in a decrypted form only within an ASIC of said apparatus.

20. An apparatus according to claim 17, wherein said receiving unit receives frames from the satellite antenna by receiving a signal in which frames of the plurality of different data streams are multiplexed.

21. An apparatus according to claim 17, wherein said determining unit determines in accordance with the identifying information of a frame received by said receiving unit whether or not a key is available to decrypt the encrypted data of the frame by comparing the identifying information to stored information providing a correspondence between identifying information and a key used to decrypt the encrypted data of the frame.

22. An apparatus according to claim 21, wherein the stored information is provided in a table having plural entries, each entry providing a correspondence between identifying information and a key used to decrypt the encrypted data of the frame, and each entry corresponding to a respective one of a plurality of different data streams.

23. A method comprising:

receiving frames from a satellite antenna, wherein each frame corresponds to one of a plurality of different data streams, wherein each of the plurality of different data streams is encrypted with a different key, and wherein each frame comprises (a) identifying information uniquely identifying that one of the plurality of different data streams to which the frame corresponds and (b) encrypted data for decryption using a key obtained in accordance with the identifying information; and

determining in accordance with the identifying information of a frame received by said receiving step whether or not a key is available to decrypt the encrypted data of the frame,

wherein said method is effected by using an adapter card connectable to a computer.

24. A method according to claim 23, wherein where a key is not available to decrypt the encrypted data of the frame, the encrypted data of the frame is prevented from being output to the computer.

25. A method according to claim 23, wherein the key is stored in an apparatus used to effect said method in a decrypted form only within an ASIC of the apparatus.

26. A method according to claim 23, wherein said receiving step receives frames from the satellite antenna by receiving a signal in which frames of the plurality of different data streams are multiplexed.

27. A method according to claim 23, wherein said determining step determines in accordance with the identifying information of a frame received by said receiving step whether or not a key is available to decrypt the encrypted data of the frame by comparing the identifying information to stored information providing a correspondence between identifying information and a key used to decrypt the encrypted data of the frame.

28. A method according to claim 27, wherein the stored information is provided in a table having plural entries, each entry providing a correspondence between identifying information and a key used to decrypt the encrypted data of the frame, and each entry corresponding to a respective one of a plurality of different data streams.

29. An apparatus comprising:

a receiving unit configured to receive frames from a satellite antenna, wherein each frame corresponds to one of a plurality of different data streams, and wherein each frame comprises (a) identifying information uniquely identifying that one of the plurality of different data streams to which the frame corresponds and (b) encrypted data for decryption using one of a plurality of different keys, the one key being obtained in accordance with the identifying information; and

an output unit configured to determine in accordance with the identifying information of a frame received by said receiving unit whether or not a key is available to decrypt the encrypted data of the frame, and where available to output decrypted data, obtained from the encrypted data of the frame by using the key, through a bus interface to a computer for further processing by the computer.

30. An apparatus comprising:

a receiving unit configured to receive frames from a satellite antenna, wherein each frame corresponds to one of a plurality of different data streams, and wherein each frame comprises (a) identifying information uniquely identifying that one of the plurality of different data streams to which the frame corresponds and (b) encrypted data for decryption using one of a plurality of different keys, the one key being obtained in accordance with the identifying information; and

a determining unit configured to determine accordance with the identifying information of a frame whether or not a key is available to decrypt the encrypted data of the frame,

wherein said apparatus is an adapter card connectable to a computer.