Authentication of data in a digital transmission system

• US 7,856,557 B2
• Filed: 01/26/2007
• Issued: 12/21/2010
• Est. Priority Date: 03/25/1998
• Status: Expired due to Fees

• Current Assignee: InterDigital Madison Patent Holdings (InterDigital, Inc.)
• Original Assignee: Thomson Licensing SA (Vantiva SA)
• Inventors: Beuque, Jean-Bernard G. M.
• Primary Examiner(s): Brown; Christopher J
• Application Number:
  US11/698,460
• Publication Number:
  US 20070124594A1
• Time in Patent Office: 1,425 Days
• Field of Search: 713/181, 713/165, 713/161, 713/193, 380/217
• US Class Current: 713/181
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/235 Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2351 involving encryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/23614 Multiplexing of additional data and video streams arrangements for simultaneous broadcast of plural pieces of information H04H20/28
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/435 Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4353 involving decryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4586 Content update operation triggered locally, e.g. by comparing the version of software modules in a DVB carousel to the version stored locally deployment, distribution, installation, update of software G06F8/65; error detection or correction of the data by redundancy during software upgrading G06F11/1433; arrangements for updating broadcast information or broadcast-related information H04H60/25
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8166 involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/818 OS software
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A method of authentication of data to be sent in a digital transmission system, the data being organized in a series of at least three files, involving generating a first authentication value for at least one first file, storing said first authentication value in a second file, generating a second authentication value for said second file, storing said second authentication value in a third file, and transmitting said first, second, and third files to a receiver.

Claims

1. A method of authentication of data to be sent in a digital transmission system, the data being organized in a hierarchical structure comprising a series of at least three files, comprising the steps of:

generating a first authentication value for at least one first file;

storing said first authentication value in a second file, wherein the second file is a subdirectory hierarchically above the at least one first file;

generating a second authentication value for said second file;

storing said second authentication value in a third file, wherein the third file is a subdirectory hierarchically above the second file; and

transmitting the hierarchical structure comprising said first, second, and third files and the first and second authentication values to a receiver using a transmitter.

2. The method as claimed in claim 1, further comprising the steps of:

encapsulating the first, second, and third files in a series of tables; and

encapsulating the tables in data packets in a transport packet stream.

3. The method as claimed in claim 2 wherein the transport packet stream conforms to the MPEG standard.

4. The method as claimed in claim 1, wherein the data files are formatted according to the DSMCC standard.

5. The method as claimed in claim 1, wherein the second authentication value is generated for the first data file by being applied to at least the first authentication value stored in the second data file.

6. An apparatus for authentication of data to be sent in a digital transmission system, the data being organized in a hierarchical structure comprising a series of at least three files, the apparatus comprising:

a microprocessor for generating a first authentication value for at least one first file;

tangible storage memory for storing said first authentication value in a second file, wherein the second file is a subdirectory hierarchically above the at least one first file;

the microprocessor for generating a second authentication value for said second file;

tangible storage memory for storing said second authentication value in a third file, wherein the third file is a subdirectory hierarchically above the second file; and

a transmitter for transmitting the hierarchical structure comprising said first and second files and the first and second authentication values to a receiver.

7. The apparatus as claimed in claim 6, further comprising:

the microprocessor for encapsulating the first, second and third files in a series of tables; and

the microprocessor for encapsulating the tables in data packets in a transport packet stream.

8. The apparatus as claimed in claim 7, wherein the transport packet stream conforms to the MPEG standard.

9. The apparatus as claimed in claim 6, in which the digital transmission system corresponds to a digital television system.

10. The apparatus as claimed in claim 6, wherein the data files are formatted according to the DSMCC standard.

11. The apparatus as claimed in claim 6, wherein the second authentication value is generated for the first data file by being applied to at least the first authentication value stored in the second data file.

12. A method of verification of encapsulated and formatted data received in a digital transmission system, the method comprising the steps of:

reassembling data from encapsulated and formatted data transmitted by the digital transmission system, wherein the received data is organized in a hierarchical structure comprising a first, a second, and a third file, and first and second authentication values, wherein the second file is a subdirectory hierarchically above the first file and comprises the first authentication value for the first file, and wherein the third file is a subdirectory hierarchically above the second file and comprises the second authentication value for the second file; and

verifying, by a microprocessor, the reassembled data by using at least said second authentication value.

13. The method as claimed in claim 12, wherein the step of verifying is performed by using also said first authentication value.

14. The method as claimed in claim 12, wherein the data files are formatted according to the DSMCC standard.

15. The method as claimed in claim 12, wherein the encapsulated and formatted data conforms to the MPEG standard.

16. An apparatus for verification of encapsulated and formatted data received in a digital transmission system, the apparatus comprising:

microprocessor for reassembling data from encapsulated and formatted data transmitted by the digital transmission system, wherein the received data is organized in a hierarchical structure comprising a first, a second, and a third file, and first and second authentication values, wherein the second file is a subdirectory hierarchically above the first file and comprises the first authentication value for the first file, and wherein the third file is a subdirectory hierarchically above the second file and comprises the second authentication value for the second file; and

a microprocessor for verifying the reassembled data by using at least said second authentication value.

17. The apparatus as claimed in claim 16, wherein the verifying means also uses said first authentication value.

18. The apparatus as claimed in claim 16, wherein the reassembling means and the verifying means are embodied in a processor.

19. The apparatus as claimed in claim 16, wherein the digital transmission system corresponds to a digital television system.

20. The apparatus as claimed in claim 16, wherein the data files are formatted according to the DSMCC standard.

21. The apparatus as claimed in claim 16, wherein the received encapsulated and formatted data conforms to the MPEG standard.