Intrusion detection for object security

• US 6,754,908 B1
• Filed: 02/16/2000
• Issued: 06/22/2004
• Est. Priority Date: 11/12/1999
• Status: Expired due to Term

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: General Instrument Corporation (CommScope Holding Company, Inc.)
• Inventors: Medvinsky, Alexander
• Primary Examiner(s): Miller, John
• Assistant Examiner(s): BELIVEAU, SCOTT E
• Application Number:
  US09/505,336
• Time in Patent Office: 1,588 Days
• Field of Search: 725/16, 725/25, 725/31, 725/107, 725/114, 725/116, 725/131, 725/139, 725/146, 725/152, 725/140, 725/132, 380/2, 713/187, 713/194, 713/200, 702/119
• US Class Current: 725/107
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04N 17/004 for digital television systems
• CPC Class Codes: H04N 21/2404 Monitoring of server processing errors or hardware failure error or fault detection G06F11/07; monitoring in general G06F11/30
• CPC Class Codes: H04N 21/25833 involving client hardware characteristics, e.g. manufacturer, processing or storage capabilities allocation of resources considering hardware capabilities in multiprogramming arrangements G06F9/5044; allocation of resources considering software capabilities in multiprogramming arrangements G06F9/5055
• CPC Class Codes: H04N 21/426 Internal components of the client ; Characteristics thereof H04N5/44 takes precedence
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/44236 Monitoring of piracy processes or activities protecting computer platforms against harmful, malicious or unexpected behaviour or activities using intrusion detection and counter measures G06F21/566; computer virus detection and handling G06F21/56
• CPC Class Codes: H04N 21/4424 Monitoring of the internal components or processes of the client device, e.g. CPU or memory load, processing speed, timer, counter or percentage of the hard disk space used error monitoring in general G06F11/30; arrangements for monitoring conditions of receiving stations in broadcast systems H04H60/32; diagnosis, testing or measuring for television receivers H04N17/04
• CPC Class Codes: H04N 21/4425 Monitoring of client processing errors or hardware failure
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 7/165 Centralised control of user terminal subsequent to an upstream request signal H04N7/17345; Registering at central by two-way working H04N7/17309
• CPC Class Codes: H04N 7/167 Systems rendering the television signal unintelligible and subsequently intelligible

Abstract

According to the invention, an apparatus and methods for detecting modifications to information within a content receiver are described. In one embodiment, a method for detecting modification to a content receiver within a conditional access system is disclosed. In this process, a content provider generates a message. The message is sent to the content receiver by way of a network. The content receiver gets the message from the network. The content provider detects any unauthorized modification to the content receiver.

Claims

1. A method for detecting modification to a content receiver within a conditional access system, the method comprising steps of:

generating a message by a content provider of the conditional access system;

sending the message to a content receiver by way of a network;

receiving the message by the content receiver from the network; and

loading a portion of the message that disrupts operation of the content receiver if the content receiver fails to check at least one of authentication of the message and authorization of the message.

2. The method for detecting modification to a content receiver within a conditional access system of claim 1, further comprising a step of verifying the validity of the message as it passes from the content provider to the content receiver.

3. The method for detecting modification to a content receiver within a conditional access system of claim 1, further comprising a step of recording an exception condition if the content receiver notifies the content provider of an error in the message.

4. The method for detecting modification to a content receiver within a conditional access system of claim 1, further comprising a step of detecting if the content receiver fails to report interacting with an unauthorized resource proscribed by the message.

5. The method for detecting modification to a content receiver within a conditional access system of claim 1, further comprising steps of:

checking authenticity of the message, and

checking authorization of the message.

6. A method for detecting modification to a content receiver within a conditional access system after a content receiver is deployed in a broadcast television system, the method comprising steps of:

generating a message with a content provider couple to the conditional access system;

sending the message with a content receiver by way of a content ditrbution network wherein;

the message includes an intentionally inserted error, and

the content receiver is deployed in the coditional access system for receving content that includes video programs;

receiving the message by the content receiver from the content destribution network,

checking authenticity of the message;

cheking authorazation of the messge; and

automatically detecting, at a point remote to the content receiver, that the content receiver failed to detect the intentionally-inserted error in the message.

8. The method for detecting modification to a content receiver within a conditional access system after the content receiver is deployed in the broadcast television system of claim 6, further comprising a step of reporting an exception condition if the content receiver fails to report an error in response to either of the checking steps.

9. The method for detecting modification to a content receiver within a conditional access system after the content receiver is deployed in the broadcast television system of claim 6, further comprising a step of reporting an exception condition if the content receiver reports an error in response to either of the checking steps.

7. A method for detecting modification to a content receiver within a conditional access system after a content receiver is deployed in a broadcast television system, the method comprising steps of:

generating a message with a content provider couple to the conditional access system;

sending the message with a content receiver by way of a content ditribution network wherein;

the message includes an intentionally inserted error, and

the content receiver is deployed in the coditional access system for receving content that includes video programs;

receiving the message by the content receiver from the content destribution network; and

automatically detecting, at a point remote to the content receiver, that the content receiver failed to detect the intentionally-inserted error in the message wherein the content receiver is a set top box.

10. The method for detecting modification to a content receiver within a conditional access system after a content receiver is deployed in a broadcast television system, the method comprising steps of:

generating a message with a content provider coupled to the conditional access system;

sending the message to the content receiver by way of a content distribution network wherein;

the message includes an intentionally-inserted error, and

the content receiver is deployed in the conditional access system for receiving content that includes video programs;

receiving the message by the content receiver from the content distribution network;

automatically detecting, at a point remote to the content receiver, that the content receiver failed to detect the intentionally-inserted error in the message; and

randomly placing an error in the message.

11. The method for detecting modification to a content receiver within a conditional access system after a content receiver is deployed in a broadcast television system, the method comprising steps of:

generating a message with a content provider coupled to the conditional access system;

sending the message to the content receiver by way of a content distribution network wherein;

the message includes an intentionally-inserted error, and

the content receiver is deployed in the conditional access system for receiving content that includes video programs;

receiving the message by the content receiver from the content distribution network;

automatically detecting, at a point remote to the content receiver, that the content receiver failed to detect the intentionally-inserted error in the message;

detecting if the content receiver fails to check at least one of authentication of the message and authorization of the message; and

loading a portion of the message that disrupts operation of the content receiver.

12. A method for detecting modification to a content receiver within a conditional access system after a content receiver is deployed in a broadcast television system, the method comprising steps of:

generating a message with a content provider coupled to the conditional access system;

sending the message to the content receiver by way of a content distribution network wherein;

the message includes an intentionally-inserted error, and

the content receiver is deployed in the conditional access system for receiving content that includes video programs;

receiving the message by the content receiver from the content distribution network;

automatically detecting, at a point remote to the content receiver, that the content receiver failed to detect the intentionally-inserted error in the message;

interacting with an unauthorized resource;

detecting if the content receiver fails to report the interacting step; and

loading a portion of the message that disrupts operation of the content receiver without intervention from outside the content receiver.