Threshold cryptography scheme for conditional access systems

• US 7,224,806 B2
• Filed: 09/24/2001
• Issued: 05/29/2007
• Est. Priority Date: 11/13/2000
• Status: Expired due to Fees

• Current Assignee: Thomson Licensing (Vantiva SA)
• Original Assignee: Thomson Licensing (Vantiva SA)
• Inventors: Eskicioglu, Ahmet
• Primary Examiner(s): Barron; Gilberto
• Assistant Examiner(s): KLIMACH, PAULA W
• Application Number:
  US09/961,835
• Publication Number:
  US 20020108040A1
• Time in Patent Office: 2,073 Days
• Field of Search: 380/286, 380/46, 380/47, 713/166, 713/180, 713/181
• US Class Current: 380/286
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A method and apparatus for managing access to a signal representative of an event of a service provider, including receiving said signal in a smart card, said signal being scrambled using a scrambling key, receiving, in said smart card, data representative of a first share; constructing said scrambling key using said first share and at least one additional share, said additional share being stored in said smart card; and descrambling said signal using said constructed scrambling key to provide a descrambled signal, wherein the step of constructing said scrambling key comprises calculating the Y-intercept of the line formed on said Euclidean plane by said first, and said at least one additional share.

Claims

1. A method for managing access to a signal, said method comprising:

receiving, in a smart card, data representative of a first share being transmitted with the signal;

constructing a symmetric scrambling key using said first share and at least two additional shares, said at least two additional shares being stored in said smart card, said first and at least two additional shares constituting a subset of a total number of shares, and representing a threshold number of shares necessary to generate said symmetric scrambling key; and

descrambling the signal using said constructed scrambling key to provide a descrambled signal.

2. The method of claim 1 wherein said first, second and third shares are points on a Euclidean plane.

3. The method of claim 1, wherein said first share and said at least two additional shares are points on at least a second degree polynomial function.

4. The method of claim 1, wherein the at least two additional shares comprise at least three additional shares, such that said first share and said at least three additional shares are points on at least a third degree polynomial function.

5. The method of claim 1, wherein the scrambling key comprises a secret value computed from the first and the at least two additional shares.

6. The method of claim 1, wherein the scrambling key comprises a function of a secret value computed from the first and the at least two additional shares.

7. The method of claim 1, wherein the first share and the at least two additional shares comprise points on a polynomial function.

8. The method of claim 7, wherein the degree of the polynomial function is altered periodically.

9. The method of claim 1, comprising the further step of:

masking the first share before receiving the first share in the smart card.

10. The method of claim 9, comprising the further step of:

computing the first share from the masked version of the first share.

11. The method of claim 1, comprising the further step of:

transmitting a first share and at least one redundant share.

12. The method of claim 11, comprising the further step of:

filtering out said at least one redundant share after receiving said first share in said smart card.

13. A method for managing access to a signal representative of an event of a service provider, said method comprising:

receiving said signal in a smart card, said signal being scrambled using a symmetric scrambling key;

receiving with said received signal, in said smart card, data representative of a first share;

constructing said scrambling key using said first share and second and third shares, said second and third shares being stored in said smart card, said first, second and third shares constituting a subset of a total number of shares, and representing a threshold number of shares necessary to generate said symmetric scrambling key; and

descrambling said signal using said constructed scrambling key to provide a descrambled signal, wherein the step of constructing said scrambling key comprises calculating the Y-intercept of the curve formed on said Euclidean plane by said first, second and third shares.

14. The method of claim 13 wherein said first, second and third shares are points on a Euclidean plane.

15. The method of claim 13 wherein said smart card has a card body having a plurality of terminal pins arranged on a surface of said card body in accordance with one of ISO 7816 and PCMCIA card standards.

16. A system for managing access between a service provider and a device having a smart card coupled thereto, said device performing the steps of:

receiving a signal in the smart card, said signal being scrambled using a symmetric scrambling key;

receiving with said received signal, in said smart card, data representative of a first share;

constructing said scrambling key using said first share and second and third shares, said second and third shares being stored in said smart card, said first, second and third shares constituting a subset of a total number of shares, and representing a threshold number of shares necessary to generate said symmetric scrambling key; and

descrambling said signal using said constructed scrambling key to provide a descrambled signal, wherein the step of constructing said scrambling key comprises calculating the Y-intercept of the curve formed on said Euclidean plane by said first, second and third shares.

17. A conditional access system comprising:

at least one program service provider; and

,

a digital device including at least one smart card for receiving from the at least one program service provider a scrambled signal and a first share transmitted with the scrambled signal;

wherein said at least one smart card includes second and third shares stored therein for descrambling the scrambled signal, said second and third shares being used in conjunction with said first share to descramble said scrambled signal, said first, second and third shares constituting a subset of a total number of shares, and representing a threshold number of shares necessary to descramble said scrambled signal.

18. A method for operating a conditional access system comprising the steps of:

transmitting a scrambled signal and a first share with the scrambled signal from a service provider to a digital device;

receiving in the digital device said scrambled signal and said first share;

constructing a scrambling key using said first share and at least two additional shares, said at least two additional shares being stored in a smart card of the digital device, said first and at least two additional shares constituting a subset of a total number of shares, and representing a threshold number of shares necessary to construct said scrambling key; and

descrambling the signal using said constructed scrambling key to provide a descrambled signal.

19. A conditional access system comprising:

a transmitter; and

,

a receiver including at least one smart card for receiving from the transmitter a scrambled signal and a first share transmitted with the scrambled signal, wherein said at least one smart card includes second and third shares stored therein for descrambling the scrambled signal, said second and third shares being used in conjunction with said first share to descramble said scrambled signal, said first, second and third constituting a subset of a total number of shares, and representing a threshold number of shares necessary to descramble said scrambled signal.