Method for partially encrypting program data

• US 8,548,166 B2
• Filed: 06/25/2003
• Issued: 10/01/2013
• Est. Priority Date: 04/03/1995
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Wasilewski, Anthony J., Pinder, Howard G.
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US10/602,986
• Publication Number:
  US 20050259813A1
• Time in Patent Office: 3,751 Days
• Field of Search: 713/189, 713193-194, 380200-202, 380210-213, 380239-241, 382/232
• US Class Current: 380/239
• CPC Class Codes: H04H 20/78 CATV [Community Antenna Television] systems
• CPC Class Codes: H04H 60/15 on receiving information
• CPC Class Codes: H04H 60/23 using cryptography, e.g. encryption, authentication, key distribution
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04N 21/23476 by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/44055 by partially decrypting, e.g. decrypting a video stream that has been partially encrypted
• CPC Class Codes: H04N 21/472 End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content end-user interfaces for retrieving video data from a database G06F16/739; network services for supporting unicast streaming H04L65/612
• CPC Class Codes: H04N 7/162 Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A cable television system provides conditional access to services. The cable television system includes a headend from which service “instances,” or programs, are broadcast and a plurality of set top units for receiving the instances and selectively decrypting the instances for display to system subscribers. The service instances are partially-encrypted using public and/or private keys provided by service providers or central authorization agents. Keys used by the set tops for selective decryption may also be public or private in nature, and such keys may be reassigned at different times to provide a cable television system in which piracy concerns are minimized.

Claims

1. A method for providing an instance in a conditional access system, the method comprising the steps of:

selecting for encryption a digital bit stream from a plurality of digital bit streams using a packet identifier;

encrypting the selected digital bit stream according to a first level encryption method to provide an encrypted instance prior to combining the encrypted instance with the plurality of digital bit streams to provide a partially-encrypted bit stream; and

transmitting the partially-encrypted bit stream.

2. The method of claim 1, wherein each of the plurality of digital bit streams includes a packet identifier, and wherein the selecting step selects the digital bit stream by identifying a predetermined packet identifier.

3. The method of claim 2, wherein all of the selected digital bit stream is encrypted according to the first level encryption method.

4. The method of claim 1, wherein each of the plurality of digital bit streams includes a packet identifier, and wherein the selecting step selects the digital bit stream by identifying a plurality of predetermined packet identifiers.

5. The method of claim 4, wherein a portion of the selected digital bit stream is encrypted, wherein the encrypted portion and an unencrypted portion of the selected digital stream are combined with the plurality of digital bit streams.

6. The method of claim 5, wherein the selected digital bit stream is a program.

7. The method of claim 5, wherein the selected digital bit stream is an elementary digital bit stream.

8. The method of claim 1, wherein the selecting step includes selecting more than one digital bit stream from the plurality of digital bit streams, wherein the more than one digital bit stream is identified by predetermined packet identifiers.

9. The method of claim 8, wherein each of the more than one digital bit stream includes a distinct packet identifier, wherein the selecting step selects the more than one digital bit stream by identifying at least one of the distinct packet identifiers.

10. The method of claim 8, wherein a portion of each of the more than one digital bit stream is encrypted according to the first level encryption method.

11. The method of claim 8, wherein all of the more than one digital bit stream is encrypted according to the first level encryption method.

12. The method of claim 8, wherein at least one of a portion of each of the more than one digital bit stream and all of the more than one digital bit stream is encrypted according to the first level encryption method.

13. A method for providing a program in a conditional access system, the method comprising the steps of:

selecting for encryption a portion of the program from a multimedia transport stream using a packer identifier;

encrypting a portion of the program prior to

combining the encrypted portion and the remaining portion of the program with the multimedia transport stream; and

transmitting the combined stream.

14. The method of claim 13, wherein the program includes a plurality of elementary bit streams, and wherein each of the plurality of elementary bit streams includes a plurality of packets, each packet having a packet header.

15. The method of claim 14, wherein the packet header includes a packet identifier identifying the packet as a member of a packet stream, wherein the packet identifier is indicative of at least one of a video stream, an audio stream, and a data stream.

16. The method of claim 15, wherein the encrypted portion includes at least one of the plurality of packets associated with the video stream.

17. The method of claim 16, wherein the at least one of the plurality of packets is selected by the packet identifier indicative of the video stream.

18. The method of claim 15, wherein the encrypted portion includes at least one of the plurality of packets associated with the audio stream.

19. The method of claim 18, wherein the at least one of the plurality of packets is selected by the packet identifier indicative of the audio stream.

20. The method of claim 15, wherein the encrypted portion includes at least one of the plurality of packets associated with the data stream.

21. The method of claim 20, wherein the at least one of the plurality of packets is selected by the packet identifier indicative of the data stream.

22. The method of claim 15, wherein the encrypted portion includes at least one of the plurality of packets associated with at least one of the video stream, the audio stream, and the data stream.