Secure remote control for audio/video receiver/decoder

• US 8,837,731 B2
• Filed: 07/25/2011
• Issued: 09/16/2014
• Est. Priority Date: 07/26/2010
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Nagravision SA (Kudelski SA)
• Inventors: Nicolas, Christophe, Kudelski, Andre
• Primary Examiner(s): Pwu, Jeffrey
• Assistant Examiner(s): AMORIN, CARLOS E
• Application Number:
  US13/137,158
• Publication Number:
  US 20120051545A1
• Time in Patent Office: 1,149 Days
• US Class Current: 380/270
• CPC Class Codes: G06F 21/1011 to devices
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G08C 17/02 using a radio link
• CPC Class Codes: G08C 2201/20 Binding and programming of remote control devices
• CPC Class Codes: G08C 2201/61 Password, biometric
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/42204 User interfaces specially adapted for controlling a client device through a remote control device; Remote control devices therefor constructive details of casings for the remote control device H01H9/0235; user interfaces for controlling a tuning device of a television receiver through a remote control H03J9/00; remote control of peripheral devices connected to a television receiver through the remote control device of the television receiver H04B1/205
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 7/167 Systems rendering the television signal unintelligible and subsequently intelligible
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A system includes a remote control device and a security device, wherein both devices share a unique and constant common key, algorithms or protocol specific to a pair formed by the remote control device and the security device. The unique and constant common key, algorithms or protocol are set up during a device initialization phase. The remote control device is configured to communicate wirelessly with a receiver of the security device. The remote control device, which is paired with the security device sending data towards the receiver, includes an encryption module and a memory to store the unique and constant common key. The data is encrypted by the encryption module with the unique and constant common key, and the security device includes a decryption module and a key corresponding to the unique and constant common key to decrypt the data received from the remote control device.

Claims

1. A system, comprising:

a remote control device; and

a security device, the remote control device and the security device being configured to share at least one attribute that is specific to a pair formed by the remote control device and the security device, the at least one attribute being one of a key and an algorithm/protocol, the pair being formed during an initialization phase of the remote control and security devices, the initialization phase occurring during manufacturing of the system, wherein

the remote control device is configured to communicate wirelessly with a receiver associated with the security device,

the remote control device includes a transmitter configured to transmit a pairing data download request to the security device, the pairing data download request being a request for data associated with the pair formed by the remote control device and the security device,

the security device is configured to forward the pairing data download request to a managing center and receive pairing data associated with the pairing data download request from the managing center, the pairing data including the at least one attribute,

the remote control device is configured to receive the pairing data from the security device,

the remote control device sends data to the receiver,

the remote control device includes a first memory configured to store the key, and an encryption device configured to encrypt the data with the key stored in the first memory, and

the security device includes a decryption device, and a second memory configured to store the key, the decryption device being configured to decrypt the data received from the remote control device with the key stored in the second memory.

2. The system according to claim 1, wherein the remote control device includes a dedicated portable unit provided with a user command interface configured to activate an infrared transmitter/receiver to exchange encrypted data between the remote control device and the security device.

3. The system according to claim 1, wherein the remote control device includes a portable computer unit provided with at least one user command application configured to activate a radio frequency transmitter/receiver to exchange encrypted data between the portable computer unit and the security device.

4. The system according to claim 3, wherein the portable computer unit is one of a portable computer, a portable tablet computer and a smart phone.

5. The system according to claim 4, wherein a user command application of the portable computer unit is configured to download pairing data from a managing center upon user request, the pairing data including the at least one attribute, and the pairing data being retransmitted to the security device by the remote control device.

6. The system according to claim 1, wherein the at least one attribute is generated, during the initialization phase, on a basis of at least one of an identifier of the remote control device and an identifier of the security device.

7. The system according to claim 1, wherein,

the remote control device further includes,

a message builder parameterized according to the algorithm/protocol, said message builder encapsulating user command data into a message configured according to the algorithm/protocol, and

the security device includes a message interpreter which is parameterized by the algorithm/protocol so that the user command data is retrieved.

8. The system according to claim 1, wherein the security device is integrated in the receiver.

9. The system according to claim 1, wherein the security device includes a security module removably connected to the receiver, the security module being configured to store the at least one attribute used for pairing said security module with the remote control device, said receiver being configured to forward data received from the remote control device to the security module and to retrieve, from the security module, said received data in clear form to be processed by the receiver.

10. A portable computer unit, comprising:

a first device configured to share, with a security device that is separate from the portable computer unit, at least one attribute that is specific to a pair formed by the portable computer unit and the security device, the at least one attribute being one of a key and an algorithm/protocol, the pair being formed during an initialization phase of the portable computer unit, the initialization phase occurring during manufacturing of the portable computer unit;

a transmitter configured to transmit a pairing data download request to a managing center via the security device, the pairing data download request being a request for data associated with the pair formed by the remote control device and the security device;

a receiver configured to receive pairing data associated with the pairing data download request and transmitted by the managing center via the security device, the pairing data including the least one attribute;

a memory configured to store the key; and

a second device configured to encrypt data with the stored key, wherein the first device is configured to wirelessly send the encrypted data to the security device.

11. The portable computer unit according to claim 10, wherein the portable computer unit is one of a portable computer, a portable tablet computer and a smart phone.

12. A system, comprising:

a remote control device configured to store a key during an initialization phase of the remote control device, the initialization phase occurring during manufacturing of the system; and

a security device configured to store the key during the initialization phase, the key being specific to a pair formed by the remote control device and the security device, wherein,

the remote control device is configured to communicate wirelessly with a receiver associated with the security device,

the remote control device is configured to send data to the receiver,

the remote control device includes an encryption device configured to encrypt the data with the key stored in the remote control device, and

the security device includes a decryption device configured to decrypt the data received from the remote control device with the key stored in the security device.