System and method for processing and protecting content

• US 7,549,056 B2
• Filed: 12/20/2002
• Issued: 06/16/2009
• Est. Priority Date: 03/19/1999
• Status: Expired due to Term

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Carr, Jeffrey Douglas
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US10/326,944
• Publication Number:
  US 20040064714A1
• Time in Patent Office: 2,370 Days
• Field of Search: 713/165, 713/167, 713/189
• US Class Current: 713/189
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: H04L 2012/2841 Wireless
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 69/12 Protocol engines
• CPC Class Codes: H04N 2005/91328 the copy protection signal being a copy management signal, e.g. a copy generation management signal [CGMS]
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/23473 by pre-encrypting
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/426 Internal components of the client ; Characteristics thereof H04N5/44 takes precedence
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/443 OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/8193 : dedicated tools, e.g. video decoder software or IPMP tool
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 5/913 : for scrambling ; for copy protection
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17318 : Direct or substantially direct transmission and handling of requests

Abstract

Systems and methods that process and protect content are provided. In one example, a system may include, for example, a first device coupled to a second device. The first device may include, for example, an integrated circuit that may include a content processing system and a security system. The security system may include, for example, a digital rights manager. The first device and the second device may be part of a network. The network receives content and control information via the first device. The content processing system processes incoming content based upon at least the control information. The integrated circuit protects the content before placing the content on the network.

Claims

1. A system for processing and protecting content, comprising:

a first device comprising an integrated circuit that comprises a content processing system and a security system, the security system comprising a digital rights manager; and

a second device coupled to the first device, the first device and the second device being part of a network,

wherein the network receives content and control information via the first device,

wherein the content processing system processes incoming content based upon at least the control information, and

wherein the integrated circuit protects the content before placing the content on the network.

2. The system according to claim 1,

wherein the security system comprises a non-volatile memory, the non-volatile memory comprising a set of mode control bits, each mode control bit being one-time programmable, and

wherein device features of the first device are securely programmed via the set of mode control bits.

3. The system according to claim 2, wherein the non-volatile memory comprises a one-time programmable memory that stores at least one of a cryptographic key and a device identification number of the first device.

4. The system according to claim 1, wherein the first device is coupled to a storage device.

5. The system according to claim 4,

wherein the first device buffers or stores content in the storage device,

wherein the content buffered or stored in the storage device is protected before leaving the integrated circuit, and

wherein the protected content buffered or stored in the storage device is recovered after entering the integrated circuit.

6. The system according to claim 1, wherein the integrated circuit protects the content placed on the network using a network encryption scheme.

7. The system according to claim 1, wherein the integrated circuit is coupled to a conditional access card.

8. The system according to claim 7, wherein information flowing between the conditional access card and the integrated circuit has been at least one of encrypted and copy protected.

9. The system according to claim 1, wherein the integrated circuit comprises a crypto tool kit.

10. The system according to claim 9, wherein the crypto tool kit comprises cryptographic hardware modules that support at least one of DVB descrambling, DES, 3DES, DVI/HDCP, PVR DES/3DES, RC4, AES, SHA1, MD5, HMAC-SHA1, HMAC-MD5 and RSA/DSS/DH.

11. The system according to claim 1, wherein the digital rights manager supports a first type of digital rights management and a second type of digital rights management.

12. The system according to claim 11, wherein the digital rights manager supports interoperability between the first type of digital rights management and the second type of digital rights management.

13. The system according to claim 1, wherein the first device comprises at least one of a set top box, a media server, a home media server and a computer.

14. The system according to claim 1, wherein the network comprises a home network.

15. The system according to claim 1, wherein the integrated circuit comprises an application specific integrated circuit (ASIC).

16. A system for processing and protecting content, comprising:

a plurality of devices; and

a server coupled to the plurality of device via a network, the server comprising an ASIC, the ASIC comprising hardware modules capable of performing the following;

processing content and control information,

distributing content on the network, and

protecting content distributed on the network.

17. The network according to claim 16, wherein the ASIC comprises a digital rights manager.

18. The network according to claim 16, wherein the ASIC comprises a crypto tool kit.

19. The network according to claim 16, wherein the ASIC comprises a non-volatile memory.

20. The network according to claim 19,

wherein the non-volatile memory comprises a one-time programmable non-volatile memory,

wherein the one-time programmable non-volatile memory comprises a set of mode bits, and

wherein features of the server are enabled or disabled via programming bits in the set of mode bits.

21. The network according to claim 19,

wherein the non-volatile memory comprises a one-time programmable non-volatile memory,

wherein the one-time programmable non-volatile memory stores at least one of a cryptographic key value and a device identification number.

22. A method for processing and protecting content, comprising:

receiving protected content and control information in an integrated circuit;

processing, via the integrated circuit, the content based at least upon the control information;

protecting the content, via the integrated circuit, before the content leaves the integrated circuit; and

distributing the protected content on a network from the integrated circuit.

23. The method according to claim 22, wherein the content is protected using a crypto tool kit.