Data transmission method between a broadcasting center and a multimedia unit

• US 7,433,473 B2
• Filed: 08/31/2005
• Issued: 10/07/2008
• Est. Priority Date: 09/10/2004
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Nagracrad S.A. (Kudelski SA)
• Inventors: Kudelski, Andre, Nicolas, Christophe, Fischer, Nicolas
• Primary Examiner(s): Vu, Kimyen
• Assistant Examiner(s): Cervetti, David Garcia
• Application Number:
  US11/214,833
• Publication Number:
  US 20060056632A1
• Time in Patent Office: 1,133 Days
• Field of Search: 380259-260, 725/31
• US Class Current: 380/259
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14

Abstract

The aim of this invention is to propose a flexible solution to the risk represented by the interception of data by an unauthorized party during the transmission of said data between a broadcast center and a specialized decryption/decompression circuit such as is used in a Pay-TV decoder. This aim is achieved by a data transmission method involving a broadcast center or diffusion center, a management center and a multimedia unit, the latter comprising at least one unique key and a security module having a transport key.

Claims

1. Data transmission method between a diffusion center and a multimedia unit, the latter comprising a monolithic circuit having at least one unique key and a security module (MS) having a transport key, said diffusion center being connected to a management center, said management center having knowledge of the at least one unique key and the transport key, this method comprising the following steps:

generating a session key in the management center,

transmitting the session key to the diffusion center,

encrypting the session key in the management center using the unique key of the monolithic circuit to produce a management message,

encrypting the management message using the transport key,

transmitting an encrypted management message to the multimedia unit,

transmitting the encrypted management message to the security module by way of the multimedia unit,

decrypting the encrypted management message using the transport key in the security module to produce the encrypted session key,

transmitting the encrypted session key to the monolithic circuit,

decrypting the encrypted session key in the monolithic circuit using the unique key of said monolithic circuit,

creating a secure data transfer connection by using the session key to encrypt and decrypt data as it passes between the diffusion center and the multimedia unit.

2. Data transmission method according to claim 1, wherein the transport key is a key common to several security modules.

3. Data transmission method according to claim 1, wherein the transport key is a key specific to the security module.

4. Data transmission method according to claim 1, wherein the diffusion center and the management center form one single entity.

5. Data transmission method according to claim 1, wherein the diffusion center and the management center form two distinct entities with communication means between each other.

6. Data transmission method according to claim 1, wherein the multimedia unit includes communication channels to which is applied an encryption/decryption layer using the session key.