Method and apparatus for geographically limiting service in a conditional access system

• US 6,560,340 B1
• Filed: 01/28/2000
• Issued: 05/06/2003
• Est. Priority Date: 04/03/1995
• Status: Expired due to Term

• Current Assignee: Tech 5 SAS
• Original Assignee: Scientific-Atlanta Incorporated (Cisco Systems, Inc.)
• Inventors: Pinder, Howard G., Wasilewski, Anthony J., Akins, Glendon L. III
• Primary Examiner(s): SMITHERS, MATTHEW
• Application Number:
  US09/493,409
• Time in Patent Office: 1,194 Days
• Field of Search: 380/259, 380/200, 380/210, 380/239, 359/109-195, 340/5.2, 340/5.74
• US Class Current: 380/239
• CPC Class Codes: H04J 2203/008 Support of video
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04N 21/2265 Server identification by a unique number or address, e.g. serial number network arrangements, protocols or services for addressing or naming H04L61/00
• CPC Class Codes: H04N 21/23476 by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/426 Internal components of the client ; Characteristics thereof H04N5/44 takes precedence
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4524 involving the geographical location of the client retrieval from the Internet by querying based on geographical locations G06F16/9537; systems specially adapted for using geographical information in broadcast systems H04H60/70; protocols in which the network application is adapted for the location of the user terminal in communication control or processing H04L67/52; services making use of the location of users or terminals in wireless networks H04W4/02; locating users or terminals in wireless networks H04W64/00
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 7/162 Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17354 : in an intermediate station common to a plurality of user terminals

Abstract

A cable television system provides conditional access to services. The cable television system includes a headend from which service “instances”, or programs, are broadcast and a plurality of set top units for receiving the instances and selectively decrypting the instances for display to system subscribers. The service instances are encrypted using public and/or private keys provided by service providers or central authorization agents. Keys used by the set tops for selective decryption may also be public or private in nature, and such keys may be reassigned at different times to provide a cable television system in which piracy concerns are minimized.

Claims

1. A receiver located at a geographic location for receiving and selectively displaying a service instance, the receiver comprising:

a port for receiving an encrypted service instance and entitlement information associated therewith, wherein at least a portion of the entitlement information includes geographic reception information and a blackout/spotlight indicator;

a first microprocessor for activating display of the service instance;

a secure element coupled to the first microprocessor, the secure element comprising;

a memory for storing a geographic location indicator indicative of the geographic location of the receiver;

a second microprocessor for processing the geographic reception information to define a geographic reception area and for using the processed geographic reception information and the blackout/spotlight indicator with the geographic location indicator to determine whether the receiver is entitled to the service instance, wherein responsive to both the geographic location indicator being inside of the defined geographic reception area and the blackout/spotlight indicator being a blackout, the receiver is not entitled to the service instance, and responsive to both the geographic location indicator being inside of the defined geographic reception area and the blackout/spotlight indicator being a spotlight, the receiver is entitled to the service instance; and

wherein the first microprocessor activates display of the service instance responsive to the secure element determining that the receiver is entitled to the service instance.

2. The receiver of claim 1, wherein in response to determining that the receiver is not entitled to the received encrypted service instance, the service instance is not decrypted for display.

3. The receiver of claim 1, wherein the memory of the secure element is accessible only to the second microprocessor.

4. The receiver of claim 1, the receiver further includes:

a decryptor for decrypting the service instance responsive to the receiver being entitled to the service instance.

5. The receiver of claim 1, wherein the geographic location indicator includes x and y coordinates of a coordinate system.

6. The receiver of claim wherein the geographic reception information comprises an x centroid, a y centroid, and a radius value, and wherein the x centroid, the y centroid, and the radius define a square geographic region within the coordinate system.

7. The receiver of claim 6, further comprising:

a decryptor for decrypting the service instance, wherein the decryptor decrypts the service instance responsive to the receiver being entitled.

8. A conditional access system for selectively providing service instances to viewers, the conditional access system comprising:

a plurality of set top terminals located at geographic locations for selectively providing for display of the service instances, each of the set top terminals comprising;

a port for receiving an encrypted service instance and entitlement information associated therewith, wherein at least a portion of the entitlement information includes geographic reception information and a blackout/spotlight indicator;

a first microprocessor for activating display of the service instance;

a secure element coupled to the first microprocessor, the secure element comprising;

a memory for storing a geographic location indicator indicative of a location of a given terminal; and

a second microprocessor for processing at least a portion of the entitlement information and for using the processed entitlement information with the geographic location indicator to determine whether the given terminal is within a predetermined geographical region, wherein responsive to both the blackout/spotlight indicator being a blackout and the receiver being within the predetermined geographical region, the receiver is not entitled to the instance of service, and responsive to both the blackout/spotlight indicator being a spotlight and the receiver being within the predetermined geographical region, the receiver is entitled to the service instance;

wherein the first microprocessor activates display of the service instance responsive to the secure element determining that the given terminal is entitled to the service instance; and

an entitlement agent coupled to the plurality of receivers for providing the encrypted service instance and the entitlement information.

9. The conditional access system of claim 8, wherein in response to determining that the terminal is not entitled to the received encrypted service instance, the service instance is not decrypted for display.

10. The conditional access system of claim 8, wherein the memory of the secure element is accessible only to the microprocessor of the secure element.

11. The conditional access system of claim 8, wherein the entitlement information includes the geographic reception information in the form of an x centroid, a y centroid, and a radius value for defining an entitlement region.

12. The conditional access system of claim 11, further comprising additional entitlement agents for sending additional entitlement information that can be different for each entitlement agent and different for each service instance.

13. The conditional access system of claim 11, wherein the geographic region is associated with an entitlement agent.

14. A service origination component of a cable television system, the service origination component comprising:

means for representing a geographic region associated with the cable television system;

assigning means for assigning a geographic limitation for a service instance and for representing the geographic limitation as an x centroid, a y centroid, and a radius value, all of which define a square geographic region of the represented geographic region associated with the cable television system;

an encryptor for encrypting the service instance; and

a transmitter for transmitting the service instance and geographic information, including the geographic limitation included therein, to a service reception component.

15. The service origination component of claim 14, wherein the service origination component includes cable television head end equipment.

16. The service origination component of claim 14, wherein the service origination component includes an entitlement agent associated with the geographic region.

17. The service origination component of claim 16, wherein the service origination component includes additional entitlement agents each having an additional geographic region.

18. The service origination component of claim 14, wherein the geographic information further includes one of blacklight information and spotlight information.

19. The service origination component of claim 18, wherein the blackout information indicates that the service reception component is only to decrypt the service instance when the location of the service reception component is outside a geographic region indicated by the geographic information.

20. The service origination component of claim 18, wherein the spotlight information indicates that the service reception component is only to decrypt the service instance when the location of the service reception component is within a geographic region indicated by the geographic information.

21. A method for providing selective viewing of a service instance in a conditional access system comprising a receiver for selectively activating display of the service instance and an entitlement agent coupled to the receiver for selectively entitling the receiver to display the service instance based on a geographic location of the receiver, the method comprising, in the receiver, the steps of:

receiving an encrypted service instance and entitlement information from the entitlement agent, wherein the entitlement information includes a blackout/spotlight indicator;

decoding geographic reception information from the entitlement information;

determining from the decoded geographic reception information a geographic region;

determining from the geographic region and a geographic location indicator whether the receiver is inside of the geographic region;

responsive to both the blackout/spotlight indicator being a spotlight and the receiver is inside of the geographic region, decrypting the encrypted service instance; and

responsive to both the blackout/spotlight indicator being a blackout and the receiver is outside of the geographic region, decrypting the encrypted service instance.

22. The method of claim 21, further comprising, in the receiver, the step of:

processing the geographic reception information to recover therefrom an x centroid, a y centroid, and a radius, all of which define the geographic region.

23. The method of claim 21, wherein the geographic location indicator is stored in a memory at the receiver.

24. A method for providing selective viewing of a service instance in a conditional access system comprising a receiver for selectively activating display of the service instance and an entitlement agent for selectively entitling the receiver to display the service instance, the method comprising:

assigning a point in a two dimensional grid of entitlements to a receiver, wherein the two dimensional grid of entitlements represents entitlements granted by the entitlement agent for an instance of service;

determining a subportion of the two dimensional grid, the subportion being a blackout/spotlight field;

determining whether to black-out or spot-light the subportion, wherein responsive to both blacking-out the subportion and the assigned point of the receiver being inside of the subportion, the receiver is not entitled to the instance of service, and responsive to both spot-lighting the subportion and the assigned point of the receiver being inside of the subportion, the receiver is entitled to the instance of service.

25. The method of claim 24, further including the step:

prior to the determining step, receiving at the receiver a message having at least one subportion indicator.

26. The method of claim 25, wherein the at least one subportion indicator includes a x centroid, a y centroid, defining a given point in the two dimensional grid, and an area indicator for defining a blackout/spotlight area, around the given point.