System for securing access to data streams

• US 8,755,523 B2
• Filed: 11/16/2003
• Issued: 06/17/2014
• Est. Priority Date: 04/13/2003
• Status: Active Grant

• Current Assignee: Synamedia Limited
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Kamins, Josh, Wald, Stephanie, Belenky, Yaacov, Bogot, Carmi, Ickowicz, Gabi, Stroh, Uri, Wachtfogel, Abraham
• Primary Examiner(s): Tabor, Amare F
• Application Number:
  US10/547,911
• Publication Number:
  US 20070297603A1
• Time in Patent Office: 3,866 Days
• Field of Search: 380/201, 380/217, 380/210, 713/165
• US Class Current: 380/210
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4147 PVR [Personal Video Recorder] H04N5/76 takes precedence ; arrangements for broadcast with accumulation-type receivers H04H20/40
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10

Abstract

A method for protecting digital content is described. The method includes receiving compressed encrypted digital content, determining an output format based, at least in part, on all of the following: a user-requested output format; received control information; and a rule determining whether a clear compressed output format is allowedand producing output from the compressed digital content based on a result of the determining, wherein, if the rule does not allow clear compressed output format, the compressed encrypted digital content is provided in a form which prevents production of clear compressed output in the producing step. Related apparatus and methods are also described.

Claims

1. A digital content receiver (DCR) comprising:

a local scrambling descrambler;

a broadcast descrambler receiving an output produced by the local scrambling descrambler;

a local scrambler;

a combined extra encryption algorithm decryptor and decoder/decompressor (XDDC); and

a switch operative to provide an output of the broadcast descrambler to exactly one of the local scrambler and the XDDC,

wherein the DCR is operative to receive control information and compressed encrypted digital content, and

at least the setting of the switch is determined, at least in part, by the control information, and

the DCR is operative to produce an output based on all of the following;

the compressed digital content;

a user-requested output format;

the received control information; and

a rule determining whether a clear compressed output format is allowed, and

if the rule does not allow clear compressed output format, the compressed encrypted digital content is provided to the DCR in a form which prevents production of clear compressed output as the output of the DCR.

2. The DCR according to claim 1 and wherein the local scrambling descrambler is operative to perform exactly one of the following operations based, at least in part, on the received control information:

receive an input and produce an output substantially identical to the received input; and

receive an input, and perform descrambling on the received input, thereby producing an output.

3. The DCR according to claim 1 and wherein the local scrambler is operative to perform exactly one of the following operations based, at least in part, on the received control information:

receive an input and produce an output substantially identical to the received input; and

receive an input and perform local scrambling on the received input, thereby producing an output.

4. The DCR according to claim 1 and also comprising:

an output-producing hardware device,

wherein at least the content output unit is comprised in the hardware device.

5. The DCR according to claim 1 and wherein the hardware device is comprised in a single integrated circuit.

6. The DCR according to claim 5 and wherein the integrated circuit is comprised in a smart card.

7. The DCR according to claim 1 and also comprising:

a rendering device which renders the output sensible to at least one human sense.

8. The DCR according to claim 7 and wherein the rendering device comprises at least one of the following:

an audio rendering device;

a visual rendering device; and

an audio/visual rendering device.

9. The DCR according to claim 1 and wherein the XDDC is operative, based, at least in part, on the received control information, to receive an input, and descramble and decode the received input in an atomic operation, thereby producing an output.

10. A content-protected personal video recorder (PVR) comprising:

the DCR of claim 1; and

a PVR unit comprising PVR storage media, the PVR unit receiving the output produced by the DCR.

11. The content-protected PVR according to claim 10 and wherein the PVR unit is operative to store the received output on the PVR storage media.

12. The content-protected PVR according to claim 10 and wherein the output produced by the DCR comprises locally scrambled output.

13. The content-protected PVR according to claim 10 and wherein the PVR unit is operative to retrieve the stored output from the PVR storage media.

14. The content-protected PVR according to claim 13 and wherein the output retrieved by the PVR comprises locally scrambled output.

15. The content-protected PVR according to claim 13 and wherein the DCR performs at least one of the following on the locally scrambled output retrieved by the PVR:

decryption; and

decompression.

16. The content-protected PVR according to claim 10 and wherein the PVR unit is operative to store received extra encryption algorithm (XEA) encrypted output on the PVR storage media.

17. The content-protected PVR according to claim 10 and wherein the output produced by the DCR comprises XEA encrypted output.

18. The content-protected PVR according to claim 10 and wherein the PVR unit is operative to retrieve the stored XEA encrypted output from the PVR storage media.

19. The content-protected PVR according to claim 18 and wherein the output retrieved by the PVR comprises XEA encrypted output.

20. The content-protected PVR according to claim 18 and wherein the DCR performs, as an atomic operation, decryption and decompression on the XEA encrypted output retrieved by the PVR.

21. A content-protected television system comprising:

the DCR of claim 1; and

a television unit, the television unit receiving the output produced by the DCR.

22. The content-protected television system according to claim 21 and wherein the television unit comprises an analog television unit.

23. The content-protected television system according to claim 21 and wherein the television unit comprises a digital television unit.