Method and apparatus for recording of encrypted digital data

• US 7,239,704 B1
• Filed: 02/11/1999
• Issued: 07/03/2007
• Est. Priority Date: 02/13/1998
• Status: Expired due to Term

• Current Assignee: Thomson Licensing SA (Vantiva SA)
• Original Assignee: Thomson Licensing SA (Vantiva SA)
• Inventors: Maillard, Michel, Benardeau, Christian
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): HOFFMAN, BRANDON S
• Application Number:
  US09/622,137
• Time in Patent Office: 3,064 Days
• Field of Search: 380/210, 380/216, 380/217
• US Class Current: 380/210
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4185 for payment
• CPC Class Codes: H04N 21/433 Content storage operation, e.g. storage operation in response to a pause request, caching operations
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/8113 comprising music, e.g. song in MP3 format
• CPC Class Codes: H04N 5/775 between a recording apparatus and a television receiver
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A method relating to recording transmitted digital data in which transmitted digital information is encrypted by a recording encryption key. The recording encryption key is stored by a recording means on a recording support medium. Further, the recording encryption key is characterized in that an equivalent of the recording encryption key is encrypted by a recording transport key, which is also stored on the support medium with the encrypted information.

Claims

1. A method of recording transmitted digital data, comprising:

receiving the transmitted digital data comprising scrambled data and encrypted transmitted digital information;

decrypting the encrypted transmitted digital information to obtain transmitted digital information, wherein the transmitted digital information comprises a control word, and wherein the control word is used to descramble the scrambled data;

re-encrypting the transmitted digital information using a recording encryption key;

storing the re-encrypted transmitted digital information and the scrambled data by a recording means on a recording support medium;

encrypting the recording encryption key by a recording transport key; and

storing the encrypted recording encryption key to the recording support medium,

wherein at least one of the recording encryption key and the recording transport key is stored on a portable security module associated with the recording means.

2. The method as claimed in claim 1, in which the transmitted information is encrypted prior to transmission and received by a decoder means before being communicated to the recording means.

3. The method as claimed in claim 2, in which the decoder is associated with a portable security module used to store transmission access control keys (KO(NS), KO′

(Op1, NS) etc.) used to decrypt the transmitted encrypted information.

4. The method as claimed in claim 3, in which at least one of the recording encryption key (E (NE)) and the recording transport key (RT (A)) function in accordance with a first encryption algorithm (DES) and the transmission access control keys (KO(NS), KO′

(Op1, NS) etc.) function in accordance with a second encryption algorithm (CA).

5. The method as claimed in claim 1, which the recording transport key (RT (A)) is generated at a central recording authorization unit and a copy of this key communicated to the recording means.

6. The method as claimed in claim 5, in which the recording transport key (RT (A)) is encrypted by a further encryption key (KO(NSIM)) prior to being communicated to the recording means.

7. The method as claimed in claim 1, in which a central access control system communicates transmission access control keys (KO (NS), KO′

(Op1, NS) etc.) to the recording means.

8. The method as claimed in claim 7, in which the transmission access control keys (KO(NS), KO′

(Op1, NS) etc.) are communicated to a portable security module associated with the recording means.

9. The method as claimed in claim 7, in which the recording means directly descrambles transmitted information using the transmission access keys (KO (NS), KO′

(Op1, NS) etc.) prior to re-encryption of the information by the recording encryption key (E (NE)) and storage on the support medium.

10. The method as claimed in claim 7, in which the central access control system encrypts the broadcast access control keys (KO(NS), KO′

(Op1, NS) etc.) by a further encryption key (KO (NSIM)) prior to their communication to the recording means.

11. The method as claimed in claim 7, in which the recording means sends a request to the central access control system including information identifying the broadcast access keys needed (KO(NS), KO′

(Op1, NS) etc.), the request of authentication by the recording means using a key (KO(NSIM)) unique to that recording means.

12. The method as claimed in claim 1, using a decoder means and associated security module and a recording means and associated security module and in which a copy of the recording transport key (RT (A)) is stored in at least one of the security module associated with the decoder means and the security module associated with the recording means.

13. The method as claimed in claim 12, in which the recording transport key (RT (A)) is generated by either the recording security module or decoder security module and communicated to the other security module.

14. The method as claimed in claim 13, in which the recording transport key (RT (A)) is encrypted before communication to the other security module and decrypted by a key unique (KO(NS)) to that other security module.

15. The method as claimed in claim 14, in which the decoder security module and recording security module carry out a mutual authorization process, the unique decryption key (KO (NS)) being passed to the other security module from the encrypting security module depending on the results of the mutual authorization.

16. The method as claimed in claim 15, in which the mutual authorization step is carried out using, inter alia, an audience key K1 (C) known to both security modules.

17. The method as claimed in claim 12, in which the decoder security module possesses transmission access control keys (KO(NS), KO′

(Op1, NS) etc.) to decrypt the transmitted information in an encrypted form and a session key (K3 (NSIM)) re-encrypt the information prior to communication to the recording security module, the recording security module possessing an equivalent of the session key (K3 (NSIM)) to decrypt the information prior to encryption by the recording transport key (RT (A)).

18. The method as claimed in claim 17, in which the session key (K3 (NSIM)) is generated by one of the decoder security module and recording means security module and communicated to the other module in encrypted form using an encryption key (KO (NS)) uniquely decryptable by other security module.

19. A system for recording transmitted digital data, comprising:

a receiver/decoder for at least;

receiving the transmitted digital data, wherein the transmitted digital data comprises scrambled data and encrypted transmitted digital information, wherein the encrypted transmitted digital information comprises a control word used to descramble the scrambled data;

decrypting the encrypted transmitted digital information to obtain the control word,

wherein the transmitted digital data is re-encrypted using a recording encryption key; and

a recording means for recording the re-encrypted transmitted digital information to a recording support medium, along with an encrypted recording encryption key, wherein the recording encryption key is encrypted via a recording transport key to obtain the encrypted recorded encryption key.

20. The system as claimed in claim 19, further comprising:

a decoder means and associated security module adapted to store a copy of the recording transport key (RT(A)).

21. The system as claimed in claim 20, in which the security module associated with the decoder means is adapted to descramble transmitted information using one or more transmission access keys prior to re-encryption by a session key for subsequent communication to the recording means.

22. A system for recording transmitted digital data comprising scrambled data and encrypted transmitted digital information, comprising:

a recording support medium configured to store the encrypted transmitted digital information, and an encrypted recording encryption key, wherein the encrypted transmitted digital information comprises a control word used to descramble the scrambled data, wherein the transmitted digital information is re-encrypted using a recording encryption key, and wherein the encrypted recording encryption key is encrypted using a recording transport key; and

a portable security module configured to store at least one of the recording encryption key and the recording transport key.

23. A recording support medium, comprising:

transmitted digital data, wherein the transmitted digital data comprises scrambled data and encrypted transmitted digital information, wherein the encrypted transmitted digital information comprises a control word used to descramble the scrambled data, and wherein the encrypted transmitted digital information is decrypted to obtain the control word,

wherein the decrypted transmitted digital information is re-encrypted using a recording encryption key; and

an encrypted recording encryption key, wherein the encrypted recording encryption key is encrypted using a recording transport key.

24. A receiver/decoder used in a conditional access digital television system, comprising:

means for receiving transmitted digital data comprising scrambled data and encrypted transmitted digital information, wherein the encrypted transmitted digital information comprises a control word used to descramble the scrambled data; and

means for decrypting the encrypted transmitted digital information to obtain the control word;

wherein the transmitted digital data is re-encrypted using a recording encryption key,

wherein the recording encryption key is encrypted via a recording transport key to obtain an encrypted recorded encryption key, and

wherein the receiver/decoder is operatively connected to a recording means for recording the re-encrypted transmitted digital information and the encrypted recording encryption key to a recording support medium.