Distribution of broadcast content for remote decryption and viewing

• US 7,548,624 B2
• Filed: 01/16/2004
• Issued: 06/16/2009
• Est. Priority Date: 01/16/2004
• Status: Active Grant

• Current Assignee: DIRECTV, LLC (AT&T, Inc.)
• Original Assignee: The DIRECTV Group, Inc. (AT&T, Inc.)
• Inventors: Cocchi, Ronald P., Kahn, Raynold M., Gagnon, Gregory J.
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Schmidt; Kari L
• Application Number:
  US10/758,818
• Publication Number:
  US 20070258596A1
• Time in Patent Office: 1,978 Days
• Field of Search: 380/284, 380/212, 380/242, 380/240, 380/281, 380/239, 726/27, 726/29, 713/176, 713/193
• US Class Current: 380/284
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

Program materials received from a direct broadcast satellite system are distributed between a host receiver and a client receiver for remote decryption. Using either a same pairing key or different host and client pairing keys, an encrypted media encryption key is received at both the host and client receivers, and the encrypted media encryption key is decrypted at both the host and client receivers using the pairing key. Encrypted program materials are received from the broadcast system at the host receiver, and the encrypted program materials are decrypted at the host receiver using the media encryption key. The encrypted program materials are also transferred from the host receiver to the client receiver, where the encrypted program materials are decrypted at the client receiver using the media encryption key.

Claims

1. A method of distributing program materials received from a broadcast system between a host receiver and a client receiver for remote decryption, comprising:

(a) receiving an encrypted media encryption key at the host receiver;

(b) decrypting the encrypted media encryption key at the host receiver;

(c) re-encrypting the decrypted media encryption key at the host receiver using a pairing key;

(d) transferring the re-encrypted media encryption key from the host receiver to the client receiver, wherein the client receiver does not utilize a conditional access module (CAM);

(e) decrypting the re-encrypted media encryption key at the client receiver using the pairing key;

(f) receiving encrypted program materials from the broadcast system at the host receiver;

(g) transferring the encrypted program materials from the host receiver to the client receiver; and

(h) decrypting the encrypted program materials at the client receiver using the decrypted media encryption key.

2. The method of claim 1, further comprising decrypting the encrypted program materials at the host receiver using the decrypted media encryption key.

3. The method of claim 1, further comprising receiving the pairing key from the broadcast system at both the host receiver and the client receiver.

4. The method of claim 3, wherein the receiving step comprises:

receiving the pairing key from the broadcast system at the host receiver, wherein the pairing key is encrypted; and

decrypting the pairing key at the host receiver using a receiver key uniquely associated with the host receiver.

5. The method of claim 3, wherein the receiving step comprises:

receiving the pairing key at the client receiver, wherein the pairing key is encrypted; and

decrypting the pairing key at the client receiver using a receiver key uniquely associated with the client receiver.

6. The method of claim 5, further comprising:

receiving the pairing key from the broadcast system at the host receiver; and

transferring the pairing key from the host receiver to the client receiver.

45. The method of claim 1 wherein the client receiver does not comprise a tuner.

47. The method of claim 45 wherein the host receiver utilizes a conditional access module (CAM).

7. An apparatus for distributing program materials received from a broadcast system between a host receiver and a client receiver for remote decryption, comprising:

(a) means for receiving an encrypted media encryption key at the host receiver;

(b) means for decrypting the encrypted media encryption key at the host receiver;

(c) means for re-encrypting the decrypted media encryption key at the host receiver using a pairing key;

(d) means for transferring the re-encrypted media encryption key from the host receiver to the client receiver, wherein the client receiver does not utilize a conditional access module (CAM);

(e) means for decrypting the re-encrypted media encryption key at the client receiver using the pairing key;

(f) means for receiving encrypted program materials from the broadcast system at the host receiver;

(g) means for transferring the encrypted program materials from the host receiver to the client receiver; and

(h) means for decrypting the encrypted program materials at the client receiver using the decrypted media encryption key.

8. The apparatus of claim 7, further comprising means for decrypting the encrypted program materials at the host receiver using the decrypted media encryption key.

9. The apparatus of claim 7, further comprising means for receiving the pairing key from the broadcast system at both the host receiver and the client receiver.

10. The apparatus of claim 9, wherein the means for receiving comprises:

means for receiving the pairing key from the broadcast system at the host receiver, wherein the pairing key is encrypted; and

means for decrypting the pairing key at the host receiver using a receiver key uniquely associated with the host receiver.

11. The apparatus of claim 9, wherein the means for receiving comprises:

means for receiving the pairing key at the client receiver, wherein the pairing key is encrypted; and

means for decrypting the pairing key at the client receiver using a receiver key uniquely associated with the client receiver.

12. The apparatus of claim 11, further comprising:

means for receiving the pairing key from the broadcast system at the host receiver; and

means for transferring the pairing key from the host receiver to the client receiver.

46. The apparatus of claim 7 wherein the client receiver does not comprise a tuner.

48. The apparatus of claim 46 wherein the host receiver utilizes a conditional access module (CAM).

13. A method of distributing program materials received from a broadcast system between a host receiver and a client receiver for remote decryption, comprising:

(a) receiving an encrypted media encryption key at a conditional access module associated with the host receiver;

(b) decrypting the encrypted media encryption key at the conditional access module;

(c) re-encrypting the decrypted media encryption key at the conditional access module using a first pairing key shared between the conditional access module and the host receiver;

(d) transferring the re-encrypted media encryption key from the conditional access module to the host receiver;

(e) receiving the re-encrypted media encryption key at the host receiver from the conditional access module;

(f) decrypting the re-encrypted media encryption key at the host receiver using the first pairing key shared between the conditional access module and host receiver;

(g) re-encrypting the decrypted media encryption key at the host receiver using a second pairing key shared between the host receiver and the client receiver, wherein the client receiver does not utilize a conditional access module (CAM);

(h) transferring the re-encrypted media encryption key from the host receiver to the client receiver; and

(i) decrypting the re-encrypted media encryption key at the client receiver using the second pairing key shared between the host receiver and the client receiver;

(j) receiving encrypted program materials from the broadcast system at the host receiver;

(k) transferring encrypted program materials from the host receiver to the client receiver; and

(l) decrypting the encrypted program materials at the client receiver using the decrypted media encryption key.

14. The method of claim 13, further comprising decrypting the encrypted program materials received from the broadcast system at the host receiver using the decrypted media encryption key.

15. The method of claim 13, further comprising receiving the first pairing key from the broadcast system at both the host receiver and the conditional access module.

16. The method of claim 15, wherein the receiving step comprises:

receiving the first pairing key from the broadcast system at the host receiver, wherein the first pairing key is encrypted; and

decrypting the first pairing key at the host receiver using a receiver key uniquely associated with the host receiver.

17. The method of claim 15, wherein the receiving step comprises:

receiving the first pairing key from the broadcast system at the conditional access module; and

decrypting the first pairing key at the conditional access module.

18. The method of claim 13, further comprising receiving the second pairing key from the broadcast system at both the host receiver and the client receiver.

19. The method of claim 18, wherein the receiving step comprises:

receiving the second pairing key from the broadcast system at the host receiver, wherein the second pairing key is encrypted; and

decrypting the second pairing key at the host receiver using a receiver key uniquely associated with the host receiver.

20. The method of claim 18, wherein the receiving step comprises:

receiving the second pairing key at the client receiver, wherein the second pairing key is encrypted; and

decrypting the second pairing key at the client receiver using a receiver key uniquely associated with the client receiver.

21. The method of claim 20, further comprising:

receiving the second pairing key from the broadcast system at the host receiver; and

transferring the second pairing key from the host receiver to the client receiver.

22. An apparatus for distributing program materials received from a broadcast system between a host receiver and a client receiver for remote decryption, comprising:

(a) means for receiving an encrypted media encryption key at a conditional access module associated with the host receiver;

(b) means for decrypting the encrypted media encryption key at the conditional access module;

(c) means for re-encrypting the decrypted media encryption key at the conditional access module using a first pairing key shared between the conditional access module and the host receiver;

(d) means for transferring the re-encrypted media encryption key from the conditional access module to the host receiver;

(e) means for receiving the re-encrypted media encryption key at the host receiver from the conditional access module;

(f) means for decrypting the re-encrypted media encryption key at the host receiver using the first pairing key shared between the conditional access module and host receiver;

(g) means for re-encrypting the decrypted media encryption key at the host receiver using a second pairing key shared between the host receiver and the client receiver, wherein the client receiver does not utilize a conditional access module (CAM);

(h) means for transferring the re-encrypted media encryption key from the host receiver to the client receiver; and

(i) means for decrypting the re-encrypted media encryption key at the client receiver using the second pairing key shared between the host receiver and the client receiver;

(j) means for receiving encrypted program materials from the broadcast system at the host receiver;

(k) means for transferring encrypted program materials from the host receiver to the client receiver; and

(l) means for decrypting the encrypted program materials at the client receiver using the decrypted media encryption key.

23. The apparatus of claim 22, further comprising means for decrypting the encrypted program materials received from the broadcast system at the host receiver using the decrypted media encryption key.

24. The apparatus of claim 22, further comprising means for receiving the first pairing key from the broadcast system at both the host receiver and the conditional access module.

25. The apparatus of claim 24, wherein the means for receiving comprises:

means for receiving the first pairing key from the broadcast system at the host receiver, wherein the first pairing key is encrypted; and

means for decrypting the first pairing key at the host receiver using a receiver key uniquely associated with the host receiver.

26. The apparatus of claim 24, wherein the means for receiving comprises:

means for receiving the first pairing key from the broadcast system at the conditional access module; and

means for decrypting the first pairing key at the conditional access module.

27. The apparatus of claim 22, further comprising means for receiving the second pairing key from the broadcast system at both the host receiver and the client receiver.

28. The apparatus of claim 27, wherein the means for receiving comprises:

means for receiving the second pairing key from the broadcast system at the host receiver, wherein the second pairing key is encrypted; and

means for decrypting the second pairing key at the host receiver using a receiver key uniquely associated with the host receiver.

29. The apparatus of claim 27, wherein the means for receiving comprises:

means for receiving the second pairing key at the client receiver, wherein the second pairing key is encrypted; and

means for decrypting the second pairing key at the client receiver using a receiver key uniquely associated with the client receiver.

30. The apparatus of claim 29, further comprising:

means for receiving the second pairing key from the broadcast system at the host receiver; and

means for transferring the second pairing key from the host receiver to the client receiver.

31. A method of distributing program materials received from a broadcast system between a host and client receiver for remote decryption, comprising:

(a) receiving an encrypted media encryption key at a conditional access module associated with the host receiver;

(b) decrypting the encrypted media encryption key at the conditional access module;

(c) re-encrypting the decrypted media encryption key at the conditional access module using a pairing key shared between the conditional access module and the client receiver, wherein the client receiver does not utilize a conditional access module (CAM);

(d) transferring the re-encrypted media encryption key from the conditional access module to the client receiver;

(e) decrypting the re-encrypted media encryption key at the client receiver using the pairing key shared between the conditional access module and client receiver;

(f) receiving encrypted program materials from the broadcast system at the host receiver;

(g) transferring encrypted program materials from the host receiver to the client receiver; and

(h) decrypting the encrypted program materials at the client receiver using the decrypted media encryption key.

32. The method of claim 31, further comprising receiving the pairing key from the broadcast system at both the conditional access module and the client receiver.

33. The method of claim 32, wherein the receiving step comprises:

receiving the pairing key from the broadcast system at the conditional access module, wherein the pairing key is encrypted; and

decrypting the pairing key at the conditional access module.

34. The method of claim 32, wherein the receiving step comprises:

receiving the pairing key at the client receiver, wherein the pairing key is encrypted; and

decrypting the pairing key at the client receiver using a receiver key uniquely associated with the client receiver.

35. The method of claim 34, further comprising:

receiving the pairing key at the conditional access module; and

transferring the pairing key from the conditional access module to the client receiver.

36. The method of claim 31, wherein the transferring step comprises:

transferring the re-encrypted media encryption key from the conditional access module to the host receiver;

receiving the re-encrypted media encryption key from the conditional access module at the host receiver; and

transferring the re-encrypted media encrypted key from the host receiver to the client receiver.

37. The method of claim 36, further comprising

decrypting the re-encrypted media encryption key at the host receiver using a pairing key shared between the conditional access module and the host receiver, wherein the pairing key shared between the conditional access module and the host receiver is the same as the pairing key shared between the conditional access module and the client receiver;

and

decrypting the encrypted program materials at the host receiver using the decrypted media encryption key.

38. An apparatus for distributing program materials received from a broadcast system between a host and client receiver for remote decryption, comprising:

(a) means for receiving an encrypted media encryption key at a conditional access module associated with the host receiver;

(b) means for decrypting the encrypted media encryption key at the conditional access module;

(c) means for re-encrypting the decrypted media encryption key at the conditional access module using a pairing key shared between the conditional access module and the client receiver, wherein the client receiver does not utilize a conditional access module (CAM);

(d) means for transferring the re-encrypted media encryption key from the conditional access module to the client receiver;

(e) means for decrypting the re-encrypted media encryption key at the client receiver using the pairing key shared between the conditional access module and client receiver;

(f) means for receiving encrypted program materials from the broadcast system at the host receiver;

(g) means for transferring encrypted program materials from the host receiver to the client receiver; and

(h) means for decrypting the encrypted program materials at the client receiver using the decrypted media encryption key.

39. The apparatus of claim 38, further comprising means for receiving the pairing key from the broadcast system at both the conditional access module and the client receiver.

40. The apparatus of claim 39, wherein the means for receiving comprises:

means for receiving the pairing key from the broadcast system at the conditional access module, wherein the pairing key is encrypted; and

means for decrypting the pairing key at the conditional access module.

41. The apparatus of claim 39, wherein the means for receiving comprises:

means for receiving the pairing key at the client receiver, wherein the pairing key is encrypted; and

means for decrypting the pairing key at the client receiver using a receiver key uniquely associated with the client receiver.

42. The apparatus of claim 41, further comprising:

means for receiving the pairing key at the conditional access module; and

means for transferring the pairing key from the conditional access module to the client receiver.

43. The apparatus of claim 38, wherein the means for transferring comprises:

means for transferring the re-encrypted media encryption key from the conditional access module to the host receiver;

means for receiving the re-encrypted media encryption key from the conditional access module at the host receiver; and

means for transferring the re-encrypted media encrypted key from the host receiver to the client receiver.

44. The apparatus of claim 43, further comprising

means for decrypting the re-encrypted media encryption key at the host receiver using a pairing key shared between the conditional access module and the host receiver, wherein the pairing key shared between the conditional access module and the host receiver is the same as the pairing key shared between the conditional access module and the client receiver;

and

means for decrypting the encrypted program materials at the host receiver using the decrypted media encryption key.