Method of local conditional access for mobile equipment

• US 8,737,990 B2
• Filed: 07/26/2007
• Issued: 05/27/2014
• Est. Priority Date: 08/02/2006
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Nagravision SA (Kudelski SA)
• Inventors: Moreillon, Guy
• Primary Examiner(s): PATEL, MAHENDRA R
• Application Number:
  US12/375,832
• Publication Number:
  US 20090325576A1
• Time in Patent Office: 2,497 Days
• Field of Search: 455/434, 455/509, 455/450, 455/452.2, 455/554.1, 455/528, 455/410, 455/411, 455/418, 705/1, 705/51, 709/238, 370/209, 370/335, 370/342, 370/331, 370/337, 370/332, 380/282, 380/255, 380/200, 726/27
• US Class Current: 455/434
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/41407 embedded in a portable device, e.g. video client on a mobile phone, PDA, laptop constructional details of equipment or arrangements specially adapted for portable computer application G06F1/1626; arrangements specially adapted for mobile receivers in broadcast systems H04H20/57
• CPC Class Codes: H04N 21/4542 Blocking scenes or portions of the received content, e.g. censoring scenes
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services

Abstract

A method for conditional access to a digital data stream encrypted with at least one control word and broadcasted to at least one mobile device, said transmitter also transmitting a control message stream containing control words and access conditions, said mobile device being connected to a mobile communication network via a mobile access point, comprises: receiving the control message stream by the mobile device; determining a location identifier for the said mobile device by either the identifier of the mobile access point or the identifier of the broadcasting network transmitter; verifying access conditions contained in the control message, said access conditions comprising a reception condition related to a mobile access point identifier and/or an identifier of one broadcasting network transmitter; comparing the determined identifier with the identifier(s) contained in the access conditions; and authorizing or blocking the access to said data stream depending on the result of the comparison.

Claims

1. A method for conditional access to a digital data stream encrypted with at least one control word and broadcast via a plurality of transmitters in a broadcast network to at least one mobile device in communication with a transmitter among the plurality of transmitters, said method comprising:

receiving a control message stream by the mobile device, the control message stream comprising control words and access conditions, the access conditions including at least one location identifier;

receiving a current location identifier by the mobile device, the current location identifier being transmitted by and identifying the transmitter;

performing by the mobile device a comparison of the current location identifier with the location identifier contained in the access conditions; and

authorizing or blocking the access to said data stream by the mobile device depending on the result of said comparison;

wherein the control word comprises a key for decrypting the encrypted digital data stream, the control word being received in encrypted form; and

wherein the access conditions further comprise at least one entitlement description related to the broadcasted content and wherein the authorization or blocking of the access further depends on the presence of the at least one entitlement description.

2. The method according to claim 1, wherein the access to said data stream is authorized only if the access conditions comprise the current location identifier.

3. The method according to claim 1, wherein the access to said data stream is only authorized if the access conditions do not comprise the current location identifier.

4. The method according to claim 1, wherein the current location identifier is an identifier of a mobile access point and is extracted from the service data received from said mobile access point.

5. The method according to claim 1, wherein the current location identifier is an identifier of a broadcasting network and is extracted from the service data received from said broadcasting network transmitter.

6. The method according to claim 1, wherein the access conditions comprise a list of location identifiers from the broadcasting network.

7. The method according to claim 1, wherein the access conditions comprise a list of mobile access point identifiers.

8. The method according to claim 1, wherein the mobile device comprises a security module responsible for the treatment of the access conditions.

9. The method according to claim 1, wherein the mobile communication network is selected according to one of the GSM, GPRS, UMTS, WiMax, Wifi, Wibro types.

10. The method according to claim 1, wherein the location identifier contained in the access conditions defines a range of the location identifiers.

11. The method according to claim 1, wherein the current location identifier is signed, and wherein the mobile device verifies an identifier signature before the comparison with the identifier(s) contained in the access conditions.

12. The method according to claim 1, wherein the mobile device comprises a default identifier considered as a part of the identifier contained in the access conditions, causing the blocking of the access to said data stream if no further identifier has been introduced.

13. The method according to claim 12, wherein a duration is associated to the reception of an identifier by the mobile device, the default identifier being re-established after the expiration of the duration.

14. The method according to claim 1, wherein the current location identifier uniquely identifies the mobile access point or the broadcasting network transmitter.

15. A mobile device for providing conditional access to a digital data stream encrypted with at least one control word and broadcast via a plurality of transmitters in a broadcast network to at least one mobile device in communication with a transmitter among the plurality of transmitters, the mobile device comprising:

a wireless receiver; and

a security module;

wherein the security module is configured to perform the steps of

receiving a control message stream, the control message stream comprising control words and access conditions, the access conditions including at least one location identifier;

receiving a current location identifier, the current location identifier being transmitted by and identifying the transmitter;

performing a comparison of the current location identifier with the location identifier contained in the access conditions; and

authorizing or blocking the access to said data stream depending on the result of said comparison;

wherein the control word comprises a key for decrypting the encrypted digital data stream, the control word being received in encrypted form; and

wherein the access conditions further comprise at least one entitlement description related to the broadcasted content and wherein the authorization or blocking of the access further depends on the presence of the at least one entitlement description.

16. The mobile device according to claim 15, wherein the access to said data stream is authorized only if the access conditions comprise the current location identifier.

17. The mobile device according to claim 15, wherein the access to said data stream is only authorized if the access conditions do not comprise the current location identifier.

18. The mobile device according to claim 15, wherein the current location identifier is an identifier of a mobile access point and is extracted from the service data received from said mobile access point.

19. The mobile device according to claim 15, wherein the current location identifier is an identifier of the broadcasting network and is extracted from the service data received from said broadcasting network transmitter.