Global conditional access system for broadcast services

• US 7,636,846 B1
• Filed: 06/05/1998
• Issued: 12/22/2009
• Est. Priority Date: 06/06/1997
• Status: Expired due to Fees

• Current Assignee: UQE LLC
• Original Assignee: UQE LLC
• Inventors: Eskicioglu, Ahmet Mursit
• Primary Examiner(s): Vu; Kimyen
• Assistant Examiner(s): Paliwal; Yogesh
• Application Number:
  US09/445,133
• Time in Patent Office: 4,218 Days
• Field of Search: 713/182, 713/171, 713/176, 713/168, 713/160, 725/31, 725/6, 725/25, 725/26, 725/27, 725/28, 725/29, 725/30, 725/60, 705/50, 380/211, 380/212, 380/234, 380/241
• US Class Current: 713/176
• CPC Class Codes: H04N 21/2547 Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4622 Retrieving content or additional data from different sources, e.g. from a broadcast channel and the Internet web site content organization and management for information retrieval from the Internet G06F16/958; transmission by internet of broadcast information H04H60/82; stock exchange data over packet-switching network H04L12/1804; push services including data channel over packet-switching network H04L12/1859
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/482 End-user interface for program selection broadcast systems using EPGs H04H60/72
• CPC Class Codes: H04N 21/6582 Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number arrangements where receivers interact with the broadcast H04H20/38
• CPC Class Codes: H04N 21/8352 involving content or source identification data, e.g. Unique Material Identifier [UMID]
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A method for managing access to a scrambled event, selected from an electronic program guide, of a service provider (including broadcast television networks, cable television networks, digital satellite systems, and internet service providers). Access to the event is only achieved if the descrambling key is obtained from a digitally signed message associated with the event in the electronic program guide. Authentication of the electronic program guide provider involves decrypting the digital signature using a public key of the guide provider.

Claims

1. A method for managing access to a scrambled event of a service provider, said method comprising:

receiving in a device an electronic list of events available from one or more sources, each event having a digital signature and an encrypted message associated therewith;

receiving in the device, in response to user selection of one of the events from the list of events, the digital signature and the encrypted message associated with the selected event, the digital signature being encrypted with a first key and the encrypted message being encrypted with a second key different from the first key, the encrypted message comprising a descrambling key and event information including at least one of a channel identity, date and time stamp, event identity and payment amount corresponding to the selected event;

authenticating in the device a source of the digital signature and the encrypted message associated with the selected event by decrypting the digital signature in response to receiving the digital signature and the encrypted message;

decrypting in the device the encrypted message to obtain the descrambling key upon the authenticating;

receiving in the device the selected event from the service provider, the selected event being scrambled using the descrambling key for preventing unauthorized access to the selected event; and

descrambling in the device the selected event using the descrambling key.

2. The method of claim 1 wherein the device comprises a smart card and the steps of decrypting the message, receiving the selected event, and descrambling the selected event are performed in the smart card, and

wherein the second key is a first public key associated with the smart card and the step of decrypting uses a first private key associated with and stored in the smart card.

3. The method of claim 2 wherein the message further comprises event information, the event information being decrypted using the private key.

4. The method of claim 3 further comprising the step of storing the event information, wherein the step of storing the event information is performed in the device.

5. The method of claim 3 further comprising the step of storing the event information, wherein the step of storing the event information is performed in the smart card.

6. The method of claim 5 wherein the event information comprises channel identification data, event identity data, date and time stamp data, and billing data.

7. The method of claim 5 wherein the event information is used within the device to update a user'"'"'s account information.

8. The method of claim 7 wherein the event information is downloaded to an independent billing center to update the user'"'"'s account information.

9. The method of claim 5 wherein the smart card has a card body having a plurality of terminals arranged on a surface of the card body in accordance with one of ISO 7816 and PCMCIA card standards.

10. The method of claim 9 further comprising authenticating the list of events to verify the origin of the message.

11. The method of claim 5 wherein the first key is a second private key and the step of authenticating comprises decrypting the digital signature using a second public key that is stored in the device.

12. The method of claim 11 wherein the digital signature, the second public key and the second private key are issued by an independent certificate authority and are associated with the list provider.

13. The method of claim 12 wherein the device is a digital television.

14. The method of claim 12 wherein the device is a set-top box.

15. A method for managing access between a device having a smart card coupled thereto and a service provider, the device performing the steps of:

receiving an electronic program guide having a plurality of events from a guide provider, the guide having a message and a digital signature associated with each event in the guide, the message being encrypted using a public key of the smart card and the digital signature being created using a private key of the guide provider;

selecting an event from the guide;

receiving the encrypted message and the digital signature corresponding to the selected event;

authenticating the guide provider by decrypting the digital signature using a public key of the guide provider, the guide provider public key being stored in the device;

passing the message to the smart card;

decrypting, in the smart card, the message using a private key of the smart card to obtain event information and a symmetric key, the smart card private key being stored within the smart card;

storing the event information in the smart card and updating account information based on the event information;

receiving from the service provider the selected event, the selected event being scrambled using the symmetric key; and

descrambling, in the smart card, the selected event using the symmetric key to generate a descrambled event.

16. The method of claim 15 wherein the device is a set-top box.

17. The method of claim 15 wherein the device is a digital television.

18. A method for managing access between a device having a smart card coupled thereto and a service provider, the device performing the steps of:

receiving an electronic program guide having a plurality of events from a guide provider, the guide having a digital certificate and a separate message corresponding to each event in the guide, each of said digital certificates being encrypted using a first private key of the guide, the separate message being encrypted using a public key of the smart card and having an associated digital signature created using a second private key of the guide;

selecting an event from the guide;

receiving the digital certificate, the message and the digital signature corresponding to the selected event;

authenticating the guide provider by decrypting the digital certificate using a first public key of the guide to obtain a second public key of the guide, and decrypting the digital signature using the second guide public key, said first guide public key being stored in the device;

passing the message to the smart card;

decrypting, in the smart card, the message using a private key of the smart card to obtain event information and a symmetric key, the smart card private key being stored within the smart card;

storing the event information in the smart card and updating account information based on the event information;

receiving from the service provider the selected event, the selected event being scrambled using the symmetric key; and

descrambling, in the smart card, the selected event using the symmetric key to generate a descrambled event.

19. The method of claim 18 wherein the device is a set-top box.

20. The method of claim 18 wherein the device is a digital television.