Method for providing a secure communication between two devices and application of this method

• US 6,385,317 B1
• Filed: 04/02/1999
• Issued: 05/07/2002
• Est. Priority Date: 04/03/1996
• Status: Expired due to Term

• Current Assignee: Irdeto B.V. (MultiChoice Group Ltd.)
• Original Assignee: Irdeto Access B.V. (MultiChoice Group Ltd.)
• Inventors: Glasspool, Andrew, Davies, Donald Watts, Rix, Simon Paul Ashley
• Primary Examiner(s): Chung, Phung M.
• Assistant Examiner(s): Jack, Todd
• Application Number:
  US09/155,782
• Time in Patent Office: 1,131 Days
• Field of Search: 380/280, 380/205, 380/258, 380/259, 380/277, 380/110, 713/150, 713/159, 713/168, 713/170, 713/185
• US Class Current: 380/258
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

In a method for providing a secure communication between two devices, a first device generates a random key (Ci) and transfers this key to a second device in a first message encrypted using a public key. The second device decrypts the first encrypted message by means of a corresponding secret key to obtain the random key (Ci) and this random key is used to encrypt and decrypt all transmissions between these devices. In a decoder for a pay TV system, comprising a conditional access module and a smart card, this method is applied to provide a secure communication between the control access module and the smart card and/or between the decoder and the conditional access module.

Claims

1. A method for providing a secure communication between two devices in a decoder for a pay TV system, wherein said decoder comprises a conditional access module (CAM) and a smart card (SC), wherein a first device generates a random key (Ci) and transfers said key to a second device in a first message encrypted using a public key, wherein said second device decrypts the first encrypted message by means of a corresponding secret key to obtain said random key of a corresponding secret key to obtain said random key (Ci), wherein after decrypting said encrypted message, said second device first returns said random key (Ci) in a second encrypted message with an authentication to said first device, wherein said random key (Ci) is used to encrypt and decrypt transmissions from said second to said first device.

2. The method according to claim 1, wherein for providing said authentication said first device further generates a random number (A) and transfers this random number (A) together with said random key (Ci) in said first encrypted message to the second device, wherein the second device uses said random number (A) for authentication in the second encrypted message.

3. The method according to claim 2, wherein said second device encrypts said random number (A) under said random key (Ci) to obtain said second encrypted message.

4. The method of claim 1, wherein said method provides a secure communication between the conditional access module and the smart card.

5. The method of claim 1, wherein said method provides a secure communication between the decoder and the conditional access module.

6. The method of claim 2, wherein said method provides a secure communication between the conditional access module and the smart card.

7. The method of claim 3, wherein said method provides a secure communication between the conditional access module and the smart card.

8. The method of claim 2, wherein said method provides a secure communication between the decoder and the conditional access module.

9. The method of claim 2, wherein said method provides a secure communication between the decoder and the conditional access module.

10. A decoder for a pay TV system, comprising a conditional access module and a smart card, said conditional access module comprising means for generating a random key (Ci), means for encrypting said key in a first encrypted message using a public key encryption method, means for transferring said first encrypted message to the smart card, said smart card comprising means for receiving and decrypting said first encrypted message to obtain said random key, means for encrypting transmissions to the conditional access module under said random key, said conditional access module having means to encrypt said transmissions received from the smart card.

11. A decoder according to claim 10, wherein said smart card comprises means for returning said random key to the conditional access module in a second encrypted message with an authentication.

12. A decoder according to claim 11, wherein said generating means of the conditional access module further generates a random number which is included in said first encrypted message, wherein the smart card is adapted to use said random number as authentication in the second encrypted message.

13. A decoder for a pay TV system, comprising a conditional access module and a smart card, wherein said decoder comprises means for generating a random key (Ci), means for encrypting said key in a first encrypted message using a public key encryption method, means for transferring said first encrypted message to the conditional access module, said conditional access module comprising means for receiving and decrypting said first encrypted message to obtain said random key, means for encrypting transmissions to the decoder under said random key, said decoder having means to decrypt said transmissions received from the conditional access module.

14. The decoder according to claim 13, wherein said conditional access module comprises means for returning said random key to the decoder in a second encrypted message with an authentication.

15. The decoder according to claim 14, wherein said generating means of the decoder further generates a random number which is included in said first encrypted message, wherein the conditional access module is adapted to use said random number as authentication in the second encrypted message.