Service activation of set-top box functionality using broadcast conditional access system

• US 8,079,043 B2
• Filed: 03/12/2009
• Issued: 12/13/2011
• Est. Priority Date: 08/17/2004
• Status: Expired due to Fees

• Current Assignee: The DIRECTV Group, Inc. (AT&T, Inc.)
• Original Assignee: The DIRECTV Group, Inc. (AT&T, Inc.)
• Inventors: Kahn, Raynold M., Gagnon, Gregory J., James, Thomas H., Dulac, Stephen P., Carpenter, Jeffrey D., Arsenault, Robert G., Jijina, Aspandyar M.
• Primary Examiner(s): Saltarelli, Dominic D
• Application Number:
  US12/403,057
• Publication Number:
  US 20090172722A1
• Time in Patent Office: 1,006 Days
• Field of Search: 725 25- 31, 726/2, 726/4, 726/9, 380/210
• US Class Current: 725/25
• CPC Class Codes: H04N 21/23895 involving multiplex stream encryption
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4353 involving decryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/43853 involving multiplex stream decryption arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/4432 Powering on the client, e.g. bootstrap loading using setup parameters being stored locally or received from the server resetting in general G06F1/14; program loading or initiating in general G06F9/445; bootstrapping in general G06F9/4401; secure boots of computer platforms G06F21/57
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/6547 comprising parameters, e.g. for client setup
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A method, apparatus, and article of manufacture provide the ability to activate functionality in a set-top box 500. A feature authorization message is received in a set-top box 500. The feature authorization message comprises one or more rules to be evaluated (wherein each of the rules comprises one or more tests for a status of one or more conditional access module 502 attributes), one or more event requirements for rule evaluation, and one or more features that are dependent by the rule evaluation result (wherein each of the one or more features represents a set of one or more abilities of hardware and/or software of the set-top box 500). When one or more of the event requirements have been met, the one or more rules are evaluated to obtain a result. The ability to use the one or more features are then set based on the result.

Claims

1. A method of activating a feature in a conditional access system comprising:

receiving a feature authorization message (FAM) comprising a rule for activating a feature of the conditional access system based on a status of one or more attributes of a conditional access module (CAM), said rule specifying test data and status assessment data;

providing said test data to said CAM, and receiving output data dependent on said test data and said one or more attributes of said CAM;

assessing the status of said one or more attributes based on said output data and said status assessment data; and

setting the ability to use said feature based on said status.

2. The method of claim 1, wherein the FAM is embedded in a conditional access packet.

3. The method of claim 1, wherein the FAM is received in an encrypted file via a satellite data broadcast protocol specification.

4. The method of claim 1, wherein the FAM is received in a system information control stream.

5. The method of claim 4, wherein the FAM is embodied inside a program guide vendor object.

6. The method of claim 1, wherein the test data is provided to said CAM when an event requirement associated with the rule is satisfied.

7. The method of claim 1, wherein the feature comprises a set of one or more abilities of hardware and/or software.

8. The method of claim 7, wherein the feature comprises an abstract identifier that is recognized and is mapped to the set of one or more abilities.

9. The method of claim 1, further comprising storing a state for said feature in cache memory.

10. The method of claim 1, further comprising:

encrypting the FAM; and

storing the encrypted FAM in nonvolatile memory.

11. The method of claim 1, further comprising storing the FAM in random access memory (RAM).

12. The method of claim 1, wherein the FAM is received in a data structure comprising:

a control word packet that generates a decryption key;

a signature that authenticates the FAM; and

an encrypted FAM.

13. The method of claim 1, wherein setting the ability to use the feature comprises setting an interval of time for which the feature is enabled.

14. The method of claim 1, wherein the feature is activated in a set-top box.

15. The method of claim 1, wherein:

said test data comprises program access data which specifies service access requirements and limitations;

said output data comprises the result of a comparison of service authorization and other attribute data of the CAM with said service access requirements and limitations in said program access data; and

said status assessment data comprises a desired output data that should occur when the CAM attributes correspond to a desired status.

16. The method of claim 1, wherein:

said output data comprises an encryption or decryption of said input data;

said CAM attributes comprise encryption or decryption keys and algorithms; and

said status assessment data comprises a desired output data that should occur when the CAM attributes correspond to a desired status.

17. An apparatus for activating a feature in a conditional access system comprising:

means for receiving a feature authorization message (FAM) comprising a rule for activating a feature of the conditional access system based on a status of one or more attributes of a conditional access module (CAM), said rule specifying test data and status assessment data;

means for providing said test data to said CAM, and receiving output data dependent on said test data and said one or more attributes of said CAM;

means for assessing the status of said one or more attributes based on said output data and said status assessment data; and

means for setting the ability to use said feature based on said status.

18. The apparatus of claim 17, wherein the FAM is received in a data structure comprising:

a control word packet that generates a decryption key;

a signature that authenticates the FAM; and

an encrypted FAM.

19. The apparatus of claim 17, wherein:

said test data comprises program access data which specifies service access requirements and limitations;

said output data comprises the result of a comparison of service authorization and other attribute data of the CAM with said service access requirements and limitations in said program access data; and

said status assessment data comprises a desired output data that should occur when the CAM attributes correspond to a desired status.

20. The apparatus of claim 17, wherein:

said output data comprises an encryption or decryption of said input data;

said CAM attributes comprise encryption or decryption keys and algorithms; and

said status assessment data comprises a desired output data that should occur when the CAM attributes correspond to a desired status.