Systems and methods for performing transport I/O

• US 9,774,908 B2
• Filed: 09/29/2014
• Issued: 09/26/2017
• Est. Priority Date: 03/13/2013
• Status: Active Grant

• Current Assignee: NagraStar LLC (Kudelski SA)
• Original Assignee: NagraStar LLC (Kudelski SA)
• Inventors: Beals, William Michael, Fischer, Nicolas, Ellis, Benjamin Brian, Duval, Gregory
• Primary Examiner(s): CHEN, CAI Y
• Application Number:
  US14/500,037
• Publication Number:
  US 20150016608A1
• Time in Patent Office: 1,093 Days
• Field of Search: None
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04N 21/23406 involving management of server-side video buffer
• CPC Class Codes: H04N 21/2401 Monitoring of the client buffer
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/44004 involving video buffer management, e.g. video decoder buffer or video display buffer
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/64715 Protecting content from unauthorized alteration within the network verifying the information received for network security in communication control or processing H04L63/12; integrity in wireless network security H04W12/10
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10

Abstract

Systems and methods for implementing a Transport I/O system are described. Network encrypted content may be received by a device. The device may provide the network encrypted content to a secure processor, such as, for example, a smart card. The secure processor obtains a network control word that may be used to decrypt the network encrypted content. The secure processor may decrypt the network encrypted content to produce clear content. In embodiments, the secure processor may then use a local control word to generate locally encrypted content specific to the device. The device may then receive the locally encrypted content from the secure processor and proceed to decrypt the locally encrypted content using a shared local encryption key. The Transport I/O system ensures the protection of the network control word by maintaining the network control word on the secure processor.

Claims

1. A video processing device, comprising:

at least one input, wherein the at least one input receives a data stream comprising at least one network encrypted content stream;

a removable security device, the removable security device receiving the at least one network encrypted content from the at least one input, wherein the removable security device performs a method comprising;

receiving a signal during initialization;

based upon the signal, determining whether the removable security device is operating in an ISO-7816 compliant legacy mode;

when the removable security device is not operating in a legacy mode, performing operations comprising;

receive the network encrypted content stream, wherein the network encrypted stream comprises content and data;

obtain a network control word;

decrypt the network encrypted content stream using the network control word to generate a clear content stream;

obtain a local control word; and

encrypt the clear content stream to produce a locally encrypted content stream, wherein the locally encrypted content stream is generated using the local control word; and

a processor, the processor receiving the locally encrypted content stream from the removable security device, wherein the processor performs a method comprising;

obtain the local control word(s);

decrypt the locally encrypted content stream(s) using the local control word(s) to produce clear content; and

process the clear content stream(s).

2. The video processing device of claim 1, wherein the data stream further comprises at least one of:

at least one clear content stream; and

metadata.

3. The video processing device of claim 1, wherein processing the clear content stream(s) comprises one of:

providing the clear content stream(s) to a display device; and

storing the clear content stream(s).

4. The video processing device of claim 1, wherein the video processing device comprises a set-top-box.

5. The video processing device of claim 4, wherein the removable security device comprises a smart card.

6. The video processing device of claim 5, wherein the video processing device further comprises a smart card interface for accepting the smart card.

7. The video processing device of claim 1, wherein the video processing device and the removable security device communicate using low-voltage differential signaling (LVDS).

8. The video processing device of claim 1, wherein the removable security device supports a legacy form factor.

9. The video processing device of claim 8, wherein the legacy form factor is compatible with an ISO-7816 standard.

10. The video processing device of claim 1, wherein processing the clear content stream(s) comprises sending the clear content stream(s) to a display.

11. The video processing device of claim 1, wherein processing the clear content stream(s) comprises storing the clear content stream(s).