Method for managing rights of subscribers to a multi-operator pay-television system

• US 7,715,557 B2
• Filed: 02/09/2005
• Issued: 05/11/2010
• Est. Priority Date: 02/13/2004
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Nagravision SA (Kudelski SA)
• Inventors: Duval, Gregory
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Kaplan, Benjamin A
• Application Number:
  US11/052,913
• Publication Number:
  US 20050183112A1
• Time in Patent Office: 1,917 Days
• Field of Search: 380/200, 380/239, 380/277, 725/31, 726/27
• US Class Current: 380/200
• CPC Class Codes: H04N 21/25808 Management of client data terminal profiles in network data switching protocols H04L67/303
• CPC Class Codes: H04N 21/25866 Management of end-user data customer care in data networks H04L41/5077
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

The present invention proposes a method for managing rights of subscribers to a pay-television system comprising an access control system to which are connected subscriber management systems each managed by an operator and a plurality of subscriber decoders, said decoders each being equipped with a security module containing the rights for each subscriber allowing him the decryption of encrypted digital data of a stream broadcasted by at least one operator, during a modification of the rights carried out by an operator in the security module of a subscriber, the control access system receives data identifying a subscriber with modification commands of rights of said subscriber coming from a subscriber management system of an operator, generates a management message containing the modified rights and transmits said message to the security module of the subscriber via the stream containing the encrypted data, said method comprising the step of verification of the modifications according the properties and the available resources of the security module and the step of generation of the management message containing the modified rights when the result of the comparison is positive.

Claims

1. A method for managing rights of subscribers to a pay-television system comprising an access control system to which are connected subscriber management systems each managed by an operator and a plurality of subscriber decoders, said decoders each being equipped with a security module containing the rights for each subscriber allowing the decryption of encrypted digital data of a stream broadcasted by at least one operator, during a modification of the rights carried out by an operator in the security module of a subscriber, the method comprising:

receiving, by the access control system, data identifying a subscriber with commands for modifying the rights in the security module of the subscriber'"'"'s decoder, the data being sent by a subscriber management system of an operator;

verifying, by a filtering module connected to the access control system, the rights'"'"' modifications according to security module resources including available storage capacity depending on format and structure of the stored rights data and rights data to be stored;

when the rights modifications are acceptable by the security module, generating a management message containing the modified rights;

transmitting said management message to the security module of the subscriber'"'"'s decoder via the broadcasted stream containing the encrypted digital data; and

if the verification of the rights modifications fails, transmitting by the subscriber management system a warning message to the subscriber, said message proposing a new configuration of the rights to said subscriber by deletion and/or replacement of the superfluous rights stored in the security module.

2. The method of claim 1, wherein the access rights to encrypted digital data originating from several operators are stored in the security module in predefined storage areas allocated to each operator.

3. The method of claim 1, wherein the filtering module transmits an acceptance response leading to the generation of the management message when the total size of the data of existing rights and the data of modified rights is lower or equal to the size of the available memory area in the security module.

4. The method of claim 1, wherein the filtering module transmits a refusal response to the access control system when the total size of the data of existing rights and of the data of modified rights is larger than the size of the available storage area in the security module.

5. The method of claim 4, wherein the refusal response is returned to the subscriber management system.

6. The method of claim 1, wherein the subscriber transmits a response to the operator that will transmit a new modification command to the access control system, the filtering module proceeds to a new verification leading to a positive result thanks to the new data of a reduced size to be stored in the security module followed by the generation of a managing message.

7. The method of claim 6, wherein the response is transmitted by the return channel of the decoder of the subscriber.

8. Method according to claim 6, wherein the response is transmitted by telephone, fax, e-mail or post, when the return channel of the decoder is absent.

9. A method for managing rights of subscribers to a pay-television system comprising an access control system to which are connected subscriber management systems each managed by an operator and a plurality of subscribers'"'"' decoders, said decoders each being equipped with a security module containing the rights for each subscriber allowing the subscriber the decryption of encrypted digital data of a stream broadcasted by at least one operator, during a modification of the rights carried out by an operator in the security module of a subscriber, the method comprising:

receiving, by the access control system, data identifying a subscriber with commands for modifying the rights in the security module of the subscriber'"'"'s decoder, the data being sent by a subscriber management system of an operator;

generating a management message containing the modified rights, and including supplementary fields containing identifiers of different operators accompanied by commands of right modification;

transmitting said management message to the security module of the subscriber'"'"'s decoder via the broadcasted stream containing the encrypted digital data, said security module including a filtering module, which stores, analyzes the management message and verifies the modifications of rights transmitted by an operator according to a storage area capacity of the security module attributed to said operator; and

if the verification of the modification of rights fails, displaying a suitable warning message on a screen associated with the decoder, the message including an indication to request a new modification of the rights that is compatible with resources of the security module.