System, method and apparatus for secure digital content transmission

• US 7,565,546 B2
• Filed: 01/23/2004
• Issued: 07/21/2009
• Est. Priority Date: 03/30/1999
• Status: Expired due to Term

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Inventors: Candelore, Brant L.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): BAYOU, YONAS A
• Application Number:
  US10/764,682
• Publication Number:
  US 20040158721A1
• Time in Patent Office: 2,006 Days
• Field of Search: 713/182
• US Class Current: 713/182
• CPC Class Codes: H04N 21/254 Management at additional data server, e.g. shopping server, rights management server arrangements for maintenance or administration in data networks H04L41/00; network services using third party service providers H04L67/53
• CPC Class Codes: H04N 21/25808 Management of client data terminal profiles in network data switching protocols H04L67/303
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4135 external recorder interface circuits between an apparatus for recording television signals and a television receiver H04N5/775
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A mating key gateway is adapted to retrieve a mating key, which is used to encrypt a program key that is used to scramble digital content prior to transmission to a digital device. According to one embodiment of the invention, the mating key gateway comprises a processor, a communication interface and a non-volatile storage unit. The non-volatile storage unit is configured to store a mating key lookup table to identify a targeted server to retrieve the mating key therefrom based on the information received from a headend.

Claims

1. A mating key gateway adapted to retrieve at least one mating key used to encrypt a program key that is used to scramble digital content prior to transmission to a digital device, comprising;

a bus;

a processor coupled to the bus;

an interface coupled to the bus, the interface being adapted to receive information from (1) a sender of the digital content and (2) either a server controlled by a supplier of the digital device or a trusted third party, the information received by the interface from the sender comprises a mating key generator being a message that comprises an identifier of the supplier; and

a non-volatile storage unit coupled to the bus, the non-volatile storage unit to store a mating key lookup table to identify either the server controlled by the supplier of the digital device or the trusted third party, based on the information received from the sender, from which the at least one mating key is supplied, the mating key lookup table stored by the non-volatile storage unit comprises (i) a first group of entries forming a range of mating key generators for digital devices supplied by each supplier of a plurality of suppliers including the supplier, and (ii) a second group of entries corresponding to the first group of entries, each entry of the second group of entries including at least one mating key uniquely corresponding to and formed by at least a portion of one of the mating key generators.

2. The mating key gateway of claim 1, wherein the interface to receive the information from the sender being one of a cable provider, a satellite-based provider, a terrestrial-based provider, an Internet service provider and a conditional access (CA) provider operating with one of the cable provider, the satellite-based provider, the terrestrial-based provider and the Internet service provider.

3. The mating key gateway of claim 2, wherein the interface to receive information from the supplier being a manufacturer of the digital device.

4. The mating key gateway of claim 1, wherein the mating key generator received by the interface further comprises an identifier of a provider of a system that enables transmission of both the digital content and the mating key generator to the digital device.

5. The mating key gateway of claim 4, wherein the mating key generator received by the interface further comprises (i) an identifier that identifies a conditional access (CA) system provider over which the digital content and the mating key generator are transmitted, and (ii) a mating key sequence number.

6. The mating key gateway of claim 1, wherein the mating key lookup table stored by the non-volatile storage unit comprises (i) a first group of entries forming a range of serial numbers for digital devices supplied by each supplier of a plurality of suppliers including the supplier, and (ii) a second group of entries corresponding to the first group of entries, each entry of the second group of entries including information to establish communications with a sewer controlled by one of the plurality of suppliers.

7. The mating key gateway of claim 1, wherein the mating key lookup table stored by the non-volatile storage unit comprises (i) a first group of entries forming a range of serial numbers for digital devices supplied by each supplier of a plurality of suppliers including the supplier, and (ii) a second group of entries corresponding to the first group of entries, each entry of the second group of entries including an address to establish communications with a trusted third party authorized by one of the plurality of suppliers.

8. The mating key gateway of claim 1, wherein the mating key lookup table stored by the non-volatile storage unit comprises (i) a first group of entries forming a range of mating key generators for digital devices supplied by each supplier of a plurality of suppliers including the supplier and the at least one mating key being formed using at least a portion of one of the mating key generators, and (ii) a second group of entries corresponding to the first group of entries, each entry of the second group of entries including information to establish communications with a server controlled by one of the plurality of suppliers.

9. The mating key gateway of claim 8, wherein the information includes an address to establish communications over a network.

10. A mating key gateway adapted to retrieve a mating key used to encrypt a program key that is used to scramble digital content prior to transmission to a digital device, the mating key gateway comprising:

a processor;

an interface in communication with the processor, the interface being adapted to exchange information with (1) a headend and (2) a server configured to store a mating key associated with the digital device; and

a non-volatile storage unit to store a mating key lookup table to identify the server based on the information received from the headend, the information received from the headend includes a mating key generator being a message that comprises an identifier of the manufacturer of the digital device and the mating key being formed using at least a portion of the mating key generator.

11. The mating key gateway of claim 10, wherein the interface receives the mating key from the server being controlled by a manufacturer of the digital device.

12. The mating key gateway of claim 10, wherein the mating key generator received by the interface further comprises (i) an identifier that identifies a conditional access (CA) system provider over which the digital content and the mating key generator are transmitted, and (ii) a mating key sequence number.

13. The mating key gateway of claim 10, wherein the mating key lookup table stored by the non-volatile storage unit comprises (i) a first group of entries forming a range of serial numbers of digital devices supplied by each of a plurality of manufacturers, and (ii) a second group of entries corresponding to the first group of entries, each entry of the second group of entries including information to establish communications with a server controlled by one of the plurality of manufacturers.

14. The mating key gateway of claim 13, wherein the server controlled by one of the plurality of manufacturers is the server.

15. The mating key gateway of claim 10, wherein the mating key lookup table stored by the non-volatile storage unit comprises (i) a first group of entries forming a range of mating key generators associated with digital devices supplied by each of a plurality of manufacturers, and (ii) a second group of entries corresponding to the first group of entries, each entry of the second group of entries including information to establish communications with a server controlled by one of the plurality of manufacturers.

16. The mating key gateway of claim 15, wherein the information includes an address to establish communications over a network.

17. The mating key gateway of claim 10 being adapted to additionally store mating keys for selected digital devices.

18. A secure content delivery system comprising:

a trusted third party to store a plurality of mating keys associated with digital devices, each mating key being used to encrypt a program key that is used to scramble digital content; and

a mating key gateway in communications with the trusted third party, the mating key gateway to provide information received from a headend to the trusted third party for retrieval of a requested mating key that is computed using the information received from the headend, the information provided to the trusted third party comprises a mating key generator being a message that comprises an identifier of a supplier of one of the digital devices and the mating key generator undergoing a hash operation to produce the requested mating key.

19. The secure content delivery system of claim 18, wherein the identifier of the supplier included in the mating key generator identifies a manufacturer of the one of the digital devices.

20. The secure content delivery system of claim 18, wherein the mating key generator provided to the trusted third party further comprises an identifier of a provider of the secure content delivery system that enables transmission of both the digital content and the mating key generator to the one of the digital devices.

21. The secure content delivery system of claim 18, wherein the mating key generator provided to the trusted third party further comprises (i) an identifier that identifies a conditional access (CA) system provider over which the digital content and the mating key generator are transmitted, and (ii) a mating key sequence number.

22. A method comprising:

receiving a mating key generator;

receiving a serial number being used to locate an one-time programmable value;

computing a mating key by performing a computation on the mating key generator and the one-time programmable value to produce the mating key; and

outputting the mating key based on the mating key generator being a message including at least one of (i) a first identifier to identify a manufacturer of the digital device, (ii) a service provider identifier, (iii) a conditional access provider identifier, and (iv) a mating key sequence number and the one-time programmable value being identical to a key stored in a digital device of a set-top box targeted to receive information encrypted with either the mating key or a derivative of the mating key.