Systems and methods for performing transport I/O

• US 9,769,521 B2
• Filed: 09/29/2014
• Issued: 09/19/2017
• Est. Priority Date: 03/13/2013
• Status: Active Grant

• Current Assignee: NagraStar LLC (Kudelski SA)
• Original Assignee: NagraStar LLC (Kudelski SA)
• Inventors: Beals, William Michael, Fischer, Nicolas, Ellis, Benjamin Brian, Duval, Gregory
• Primary Examiner(s): CHEN, CAI Y
• Application Number:
  US14/499,956
• Publication Number:
  US 20150016607A1
• Time in Patent Office: 1,086 Days
• Field of Search: None
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04N 21/23406 involving management of server-side video buffer
• CPC Class Codes: H04N 21/2401 Monitoring of the client buffer
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/44004 involving video buffer management, e.g. video decoder buffer or video display buffer
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/64715 Protecting content from unauthorized alteration within the network verifying the information received for network security in communication control or processing H04L63/12; integrity in wireless network security H04W12/10
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10

Abstract

Systems and methods for implementing a Transport I/O system are described. Network encrypted content may be received by a device. The device may provide the network encrypted content to a secure processor, such as, for example, a smart card. The secure processor obtains a network control word that may be used to decrypt the network encrypted content. The secure processor may decrypt the network encrypted content to produce clear content. In embodiments, the secure processor may then use a local control word to generate locally encrypted content specific to the device. The device may then receive the locally encrypted content from the secure processor and proceed to decrypt the locally encrypted content using a shared local encryption key. The Transport I/O system ensures the protection of the network control word by maintaining the network control word on the secure processor.

Claims

1. A method of partially resetting a secure device, the method comprising:

receiving a signal to reset core software of the secure device; and

in response to receiving the signal, resetting the core software of the secure device while maintaining the transport functionality of the secure device, wherein maintaining the transport functionality of the secure device comprises;

receiving packets from a transport stream;

processing the packets to create at least one new data packet; and

providing the at least one new data packet to a device.

2. The method of claim 1, wherein resetting of the core software is performed for a software update.

3. The method of claim 1, wherein the core software controls the secure device.

4. The method of claim 1, wherein the signal to reset is a partial reset signal.

5. The method of claim 4, wherein the partial reset signal indicates that only the core software is to be reset.

6. The method of claim 1, wherein resetting of the core software is performed for maintenance of the secure device.

7. The method of claim 1, wherein the transport stream comprises a network encrypted stream.

8. The method of claim 7, wherein processing the packets comprises decrypting the network encrypted stream.

9. The method of claim 1, wherein the secure device is a smart card.

20. The method of claim 1, further comprising:

receiving a signal to completely reset the secure device, wherein the signal is a complete reset signal; and

in response to receiving the complete reset signal, resetting the core software of the secure device and the transport functionality of the secure device.

10. A secure device comprising:

at least one processor; and

memory encoding computer executable instructions that, when executed by the at least one processor, performs a method comprising;

receiving a signal to reset core software of the secure device; and

in response to receiving the signal, resetting the core software of the secure device while maintaining the transport functionality of the secure device, wherein maintaining the transport functionality of the secure device comprises;

receiving packets from a transport stream;

processing the packets to create at least one new data packet; and

providing the at least one new data packet to a device.

11. The secure device of claim 10, wherein the transport stream comprises network encrypted content.

12. The secure device of claim 11, wherein processing the packets comprises:

decrypting the network encrypted content to generate clear content; and

encrypting the clear content to generate locally encrypted content.

13. The secure device of claim 12, wherein providing the at least one new data packet comprises providing the locally encrypted content to the device.

14. The secure device of claim 13, wherein the device is a set-top-box.

15. The secure device of claim 14, wherein the secure device is a smart card.

16. A non-transitory computer storage medium encoding computer executable instructions that, when executed by at least one processor, perform a method comprising:

receiving a signal to reset core software of the secure device; and

in response to receiving the signal, resetting the core software of the secure device while maintaining the transport functionality of the secure device, wherein maintaining the transport functionality of the secure device comprises;

receiving packets from a transport stream;

processing the packets to create at least one new data packet; and

providing the at least one new data packet to a device.

17. The computer storage medium of claim 16, wherein the transport stream comprises network encrypted content, and wherein processing the packets comprises:

decrypting the network encrypted content to generate clear content; and

encrypting the clear content to generate locally encrypted content.

18. The computer storage medium of claim 17, wherein the secure device is a smart card and the device is a set-top-box connected to the smart card.

19. The computer storage medium of claim 18, wherein providing the at least one new data packet comprises providing the locally encrypted content to the set-top-box.