Method, apparatus and system for secure distribution of content

• US 8,627,482 B2
• Filed: 12/13/2006
• Issued: 01/07/2014
• Est. Priority Date: 07/24/2006
• Status: Expired due to Fees

• Current Assignee: Thomson Licensing (Vantiva SA)
• Original Assignee: Thomson Licensing (Vantiva SA)
• Inventors: Bloom, Jeffrey Adam, Ramaswamy, Kumar
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US12/309,568
• Publication Number:
  US 20090290711A1
• Time in Patent Office: 2,582 Days
• Field of Search: 380/239, 380/259, 726/26
• US Class Current: 726/26
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/8358 involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

The invention provides a method, apparatus and system for the secure distribution of content such as audiovisual content in a way that prevents users from misusing the content and provides a mechanism for tracking pirated material back to the original location of misappropriation. A security device incorporates encryption methods to insure the broadcast encryption key remains secure. A marking device incorporates, for example, digital watermarking methods that attach to the content information to identify a location of origin of the misappropriation, such as a Set-top Box (STB) and/or smart card.

Claims

1. A method for secure distribution of content, comprising:

decrypting content encrypted using a first key, the first key encrypted with a second key, with a locally stored copy of the second key and a received copy of the first key;

marking the decrypted content for identification purposes;

re-encrypting the marked content using the first key;

establishing a secure communications channel with at least one receiver for generating a unique session key with said at least one receiver;

encrypting the content intended for said at least one receiver using the unique session key; and

communicating the encrypted content encrypted using the unique session key to said at least one receiver;

wherein the communicated encrypted content is decrypted by said at least one receiver using a locally stored copy of the unique session key.

2. The method of claim 1, further comprising:

storing the marked and re-encrypted content.

3. The method of claim 1, wherein the mark comprises a watermark.

4. The method of claim 1, further comprising:

storing the distributed content and first key prior to decryption.

5. The method of claim 1, wherein the first key comprises a work key.

6. The method of claim 1, wherein the second key comprises a smart card key.

7. The method of claim 1, wherein the content comprises audiovisual content.

8. An apparatus for secure distribution of content, comprising:

a secure processing module for encrypting and decrypting content;

a smart card for locally storing and decrypting encryption keys; and

a marking module for marking content;

wherein upon receiving content encrypted with a first key and upon receiving the first key encrypted with a second key, the smart card of the apparatus decrypts the first key using a locally stored copy of the second key, the secure processing module decrypts the received encrypted content using the decrypted first key, the marking module marks the decrypted content for identification purposes and the secure processing module re-encrypts the marked content using the first key; and

wherein the apparatus;

establishes a secure communications channel with at least one receiver for generating a unique session key with said at least one receiver;

encrypts content intended for said at least one receiver using the unique session key; and

communicates the encrypted content encrypted using the unique session key to said at least one receiver;

wherein the communicated encrypted content is decrypted by said at least one receiver using a locally stored copy of the unique session key.

9. The apparatus of claim 8, wherein the apparatus receives the unique session key from a content player via a secure channel and wherein the secure processing module encrypts the decrypted content using the unique session key and wherein the apparatus communicates the content encrypted using the unique session key to the content player.

10. The apparatus of claim 9, wherein the content player decrypts the content encrypted via the unique session key using a locally stored copy of the unique session key.

11. A system for secure distribution of content, comprising:

a content source for distributing content;

an electronic counter-measure device for encrypting the distributed content using a first key and for encrypting the first key using a second key;

an apparatus for receiving the content encrypted with a first key and the first key encrypted with a second key, the apparatus including;

a secure processing module for encrypting and decrypting content;

a smart card for locally storing and decrypting encryption keys; and

a marking module for marking content;

a storage device for storing the received encrypted content and the first key;

wherein upon receiving content encrypted with the first key and upon receiving the first key encrypted with the second key, the smart card of the apparatus decrypts the first key using a locally stored copy of the second key, the secure processing decrypts the received encrypted content using the decrypted first key, the marking module marks the decrypted content for identification purposes and the secure processing module re-encrypts the marked content using the first key; and

wherein the apparatus;

establishes a secure communications channel with at least one content player for generating a unique session key with said at least one content player;

encrypts content intended for said at least one content player using the unique session key; and

communicates the encrypted content encrypted using the unique session key to said at least one content player;

wherein the communicated encrypted content is decrypted by said at least one content player using a locally stored copy of the unique session key.

12. The system of claim 11, wherein the marked, re-encrypted content is stored in the storage device.

13. The system of claim 11, further comprising:

a content player for communicating the unique session key to the apparatus via a secure channel;

wherein the apparatus encrypts the decrypted content using the unique session key and communicates the content encrypted using the unique session key to the content player and the content player decrypts the content encrypted via the unique session key using a locally stored copy of the unique session key.