Super encrypted storage and retrieval of media programs with smartcard generated keys

• US 7,457,414 B1
• Filed: 07/21/2000
• Issued: 11/25/2008
• Est. Priority Date: 07/21/2000
• Status: Expired due to Term

• Current Assignee: DIRECTV, LLC (AT&T, Inc.)
• Original Assignee: The DIRECTV Group, Inc. (AT&T, Inc.)
• Inventors: James, Thomas H., Kahn, Raynold M., Klauss, Peter M., Gagnon, Gregory J., Curren, Christopher P., Ha, David D.
• Primary Examiner(s): TRAN, ELLEN C
• Application Number:
  US09/620,772
• Time in Patent Office: 3,049 Days
• Field of Search: 257/922, 365/52, 380/274, 380/281, 380/239, 380/210, 380/255, 380/241, 380/201, 380/277, 380/278, 705/39, 705/51, 705/54, 705/55, 705/59, 705/65, 707/9, 713/165, 713/172, 713/193, 713/194, 713/150, 726/26, 726/6, 726/9, 726/20
• US Class Current: 380/201
• CPC Class Codes: G06Q 20/201 Price look-up processing, e.g. updating
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4325 by playing back content from the storage medium reproduction of recorded television signals H04N5/76; reproduction of recorded television signals H04N9/79
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/440281 by altering the temporal resolution, e.g. by frame skipping television signal recording using magnetic recording on tape for reproducing at a rate different from the recording rate H04N5/783
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/47211 for requesting pay-per-view content payment schemes payment architectures or payment protocols G06Q20/00, G07F
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 5/783 Adaptations for reproducing at a rate different from the recording rate
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/167 Systems rendering the television signal unintelligible and subsequently intelligible

Abstract

A method and apparatus for storing and retrieving program material for subsequent replay is disclosed. In summary, the present invention describes a system and method for storing and retrieving program material for subsequent replay. The method comprises the steps of accepting encrypted access control information and the program material encrypted according to a first encryption key, the access control information including a first encryption key and control data; decrypting the received access control information to produce the first encryption key; decrypting the program material using the first encryption key; re-encrypting the program material using according to a second encryption key; encrypting the second encryption key according to a third encryption key to produce a fourth encryption key; and providing the re-encrypted program material and a fourth encryption key for storage. The apparatus comprises a conditional access module, for accepting encrypted access control information and the program material encrypted according to a first encryption key, the encrypted access control information including the first encryption key and temporally-variant control data, the control access module comprising a first decryption module, for decrypting the access control information to produce the first encryption key; a first encryption module, for encrypting a second encryption key with a third encryption key to produce a fourth encryption key; and a second decryption module for decrypting the fourth encryption key to produce the second encryption key.

Claims

1. A method of storing program material in a media storage device communicatively coupled to a receiver for subsequent replay, comprising the steps of:

(a) accepting a data stream including data packets with program material encrypted according to a first encryption key and access control information which is contained within one or more control word packets that include an encrypted version of the first encryption key in the receiver;

(b) decrypting the received access control information in a conditional access module which is releasably communicatively coupled with the receiver to produce the first encryption key;

(c) decrypting the program material in the receiver using the first encryption key;

(d) re-encrypting the program material according to a second encrypting key;

(e) encrypting the second encryption key in the conditional access module according to a third encryption key to produce a fourth encryption key; and

(f) providing the re-encrypted program material and the fourth encryption key for storage eternal to the conditional access module.

2. The method of claim 1, wherein the encrypted access control information is encrypted and further comprises temporally-variant control data, and the method further comprises the steps of:

decrypting the received access control information to produce the temporally-variant control data; and

modifying the temporally variant control data to generate temporally-invariant control data.

3. The method of claim 1, wherein the conditional access module is implemented on a smartened.

4. The method of claim 1, wherein the access control information further comprises metadata describing at least one right for the program material.

5. The method of claim 4, further comprising the step of:

generating the second encryption key at least in part from the metadata.

6. The method of claim 1, wherein steps (b)–

(f) are performed in response to a pre-buy message.

7. The method of claim 6, wherein the access control information further comprises metadata describing at least one right for the program material, and the method further comprises the step of:

generating replay right data from the metadata.

8. The method of claim 7, wherein the replay right data is further generated from pre-buy data.

9. The method of claim 1, further comprising the steps of:

retrieving the stored re-encrypted program material and the fourth encryption key;

decrypting the fourth encrypting key using the third encryption key to produce the second encryption key; and

decrypting the re-encrypted material using the second encrypting key.

10. The method of claim 9, wherein the step of decrypting the fourth encryption key using the third encryption key to produce the second encryption key is performed in response to a subscriber request to access the program material.

11. The method of claim 10, wherein the access control information further comprises metadata describing at least one right for the program material, the subscriber request to access the program material comprises buy data, and the method further comprises the steps of:

generating replay right data from the metadata;

accepting the buy data;

comparing the buy data with the replay right data; and

decrypting the fourth encryption key using the third encryption key to produce the second encryption key according to the comparison between the buy data and the replay right data.

12. The method of claim 11, wherein steps (b)–

(f) are performed in response to a pre-buy message, and wherein;

the second encryption key and the third encryption key are stored in a smartcard, and the replay right data is generated from the metadata and the pre-buy message in the smartcard; and

the steps of accepting the buy data, comparing the buy data with the replay right data, and decrypting the fourth encryption key using the third encryption key to produce the second encryption key according to the comparison between the buy data and the replay right data are performed in the smartcard.

13. The method of claim 1, wherein the re-encrypted program material and the fourth encryption key are stored on a media storage device.

14. The method of claim 1, wherein the control data is temporally-variant.

15. The method of claim 14, wherein the temporally-variant control data associates an expiration time with the program material.

16. The method of claim 1, further comprising the step of generating the second encryption key in the conditional access module.

17. The method of claim 1, wherein the access control information further comprises metadata and the method further comprises the step of generating the second encryption key at least in part from the metadata.

18. The method of claim 1, further comprising the step of

augmenting the second encryption key with at least a portion of the metadata before encrypting the second encryption key in the conditional access module.

19. The method of claim 1, wherein the access control information further comprises metadata describing at least one right for the program material, and the method further comprises the step of:

augmenting the second encryption key with at least a portion of the metadata before encrypting the second encryption key in the conditional access module.

20. The method of claim 1, wherein the second encryption key is stored in the conditional access module.

21. An apparatus for storing program material encrypted according to a first encryption key for replay, comprising:

a conditional access module, for accepting encrypted access control information including the first encryption key and temporally-variant control data, the control access module comprising;

a first decryption module, for decrypting the access control information to produce the first encryption key;

a secpmd encryption module, for encrypting a second encryption key with a third encryption key to produce a fourth encryption key for storage external to the conditional access module; and

a third decryption module for decrypting the fourth encryption key to produce the second encryption key;

wherein the conditional access module is releasably communicatively coupled to a tuner, the tuner to enable reception of the encrypted access control information and the program material encrypted according to a first encryption key, the tuner comprising;

a second decryption module, for decrypting the program material using the first encryption key produced by the conditional access module;

a first encryption module, for re-encrypting the decrypted program material according to the second encryption key; and

a fourth descryption module, for decrypting the re-encrypted program material according to the second encryption key.

22. The apparatus of claim 21, wherein the conditional access module further comprises:

a pre-buy module, for controlling the first decryption module.

23. The apparatus of claim 21, wherein the access control information further comprises metadata describing at least one right for the program material.

24. The apparatus of claim 23, wherein:

the conditional access module comprises a pre-buy module for controlling the first decryption module, and for generating replay right data from the metadata.

25. The apparatus of claim 24, further comprising a buy module, communicatively coupled to the pre-buy module.

26. The apparatus of claim 25, wherein the buy module comprises:

a purchase module for accepting buy data and comparing the buy data and the replay right data from the pre-buy module; and

a control module for controlling the third decryption module based on the comparison between the buy data and the replay right data.

27. The apparatus of claim 26, further comprising a billing module, for recording the buy data.

29. The apparatus of claim 21, wherein the third encryption key is stored in the conditional access module.

30. The apparatus of claim 21, wherein the conditional access module is releasably communicatively coupled to:

a tuner for receiving the encrypted access control information and the program material encrypted according to a first encryption key;

a second decryption module, for decrypting the program material using the first encryption key from the conditional access module

a first encryption module, for re-encrypting the decrypted program material according to the key; and

a media storage device.

31. The apparatus of claim 23, wherein the conditional access module generates the second encryption key at least in part from the metadata.

32. The apparatus of claim 21, wherein the access control information further comprises metadata and the conditional access module generates the second encryption key at least in part from the metadata.

33. The apparatus of claim 23, wherein the conditional module augments the second encryption key with at least a portion of the metadata before encrypting the second encryption key in the conditional access module.

34. The apparatus of claim 21, wherein the access control information further comprises metadata, and wherein the conditional access module augments the second encryption key with at least a portion of the metadata before encrypting the second encryption key in the conditional access module.

28. The apparatus of clam 21, wherein the second encryption key is stored in the conditional access module.