DE19941550A1 - Procedure for the activation of customer-relevant authorizations on security modules in conditional access for pay services - Google Patents

Abstract

The invention relates to a method for releasing customer-specific access authorisations in conditional-access systems for receiving chargeable media services, using security modules, such as smart cards, in which security algorithms and/or customer-specific authorisations are stored in the form of software programmes. At the request of a service provider, for example, a telecom shop or another institution which is authorised to sell security modules, a service centre which is responsible for controlling authorisations sends an entitlement management message (EMM) release signal to the service provider which is allocated uniquely to the security module by indirect release, either using a telephone or remote data transmission system. Once received, the EMM release signal for the relevant media service is stored in a control device of the service provider, issued to the security module and said security module is then activated by this EMM release signal, using the control device. In the direct release procedure, the service centre uses an additional data transmission service in a digital radio broadcasting network, such as the DAB synchronised network, to send the uniquely allocated EMM release signal to the security module of the customer concerned and the centre then activates said module.

Description

Technical field

The invention relates to a method for the activation of customer-relevant Access authorizations in conditional access systems for reception fee-based services such as pay TV, digital broadcast data services in DAB, DVB, Swift, video-on-demand as well as any digital services via Broadcasting systems are broadcast using security modules, such as smart cards, on which security algorithms and / or customer-specific Permissions in the form of software programs and data are stored, according to the preamble of claim 1.

State of the art

Security modules in the form of smart cards are already used in many Areas used in which it is important to combine people or machines authorization or conditional access [Conditional Access (CA- Systems)] on data or programs or other machines, if the set conditions or authorizations are fulfilled (e.g. Pay TV). Other typical uses for smart cards are electronic Means of payment, GSM telephony or digital radio data services in DAB, DVB, Swift continues to have video-on-demand.

Access control is almost done in modern conditional access systems exclusively on the basis of smart cards in chip card technology. This Smart cards contain a stored security algorithm and kun specific permissions to receive paid data services.  

The problem for conditional access systems is that a Service provider, a content provider, certainly more than one customer, but again does not want to reach everyone. To receive a service Only authorized customers should be able to do this. These are those customers who fulfill certain defined conditions by purchasing authorizations, for example, that they paid the monthly subscription fee. For Broadcasting systems are used to transmit such authorizations. Consequently The problem arises that access to certain broadcasting systems widespread information should be controlled, but which in principle by anyone can be received.

Securing access to such information as e.g. B. Pay TV, by means of Conditional access systems are done by scrambling, which is encrypted selection of the program contents by storing reception authorizations in the Security module of the terminal, and by adding Conditions of reception for the program. Devices for receiving a pay TV Programs are usually the so-called set-top boxes or decoders. There are but other devices are also possible, e.g. B. mobile receivers, PC cards or PCMCIA modules, or the end device can be integrated into the television. In many cases, however, the activation of smart cards in broadcasting systems, especially when used in devices for mobile reception of services without point-to-point connection as with the telephone, because of the missing Guaranteed receipt problematic. Only the activation enables a Customer receives a service of his choice immediately after purchasing a card can use. However, the sender of an activation usually has no information whether his activation has actually reached the customer. An activation does not take place if a radio reception for the device used is impossible, e.g. B. by building shielding in underground garages or z. B. in cases where a to send permissions required radio network has not yet been expanded so far that reception of Authorizations through a so-called EMM message (Entitlement Management Messages) is not possible across the board. In contrast, it is a controlled one  Initial activation with feedback is very safe and also enables eyes Obvious collection for the activated service at the time of its acquisition.

Program content is scrambled by encrypting the data selection algorithm under the control of a so-called control word CW be encrypted. The algorithm comes in digital, on the MPEG-2 Standard-based television, mainly DVB Common in Europe Scrambling algorithm used. But there are also other algorithms possible, such as DES or Triplle DES u. a. (cf. Bruce Schneier, Applied Cryptography, Wiley, 1996).

In so-called Entitlement Controll Messages (ECM) a decoder or other receiving module in addition to new control words (CW) also the Conditions communicated under which a program can be received. There Both the CW and the conditions of receipt from the respective service depend, ECM are assigned to each service. After receiving one ECM is forwarded directly to the security module. The control word CW must be transmitted confidentially. To protect the ECM cryptographic methods used. Because the ECM is sent to all customers all authorized customers must have the same key to the Decrypt the control word cryptogram. This will Service key, SK, called. The control word CW should be in relatively short Intervals are exchanged to detect scrambling patterns impossible to make.

For setting and changing receive authorizations in the decoder or are stored in the security module, Entitlement Management Messages (EMM) used. EMM messages must be sent to the individual Address of the customer (or the decoder or the security module) sent become. Customer address and EMM messages have to be changed to be protected; it must be ensured that only the program provider Can generate EMM messages. Individual addresses appear in the EMM  Messages always unencrypted; one can protect against reproduction can only be achieved through additional information that is unreadable for the customer is saved. This is the personal key (PK) that comes with the Customer address is linked. EMM messages are about the same Broadcasting system as the user data sent. EMM messages are not fixed linked with the program content, but with the logical address of the Terminal of the customer or with that of the security module, so that EMM on individual customers or groups of customers can be addressed. For the Use of certain services such as B. Mobile received services or pay per View can also have a back channel available either manually (call a service center) or automatically (e.g. connection from Decoder to the transmission center via TCP / IP).

Permissions can change if e.g. B. customer fee accounts cannot be compensated for, for example, blocking a reception may result in authorization. However, EMMs can also serve To activate services on smart cards for the first time or to reactivate them. In these cases the authorizations in the security module, such as smart cards, are reset. Today, chip cards that are not fixed are mostly used as security modules are connected to the terminal, but also removed from it and can be exchanged.

The state of the art is based on the publication in Bernd Seiler (ed.): paperback of the telekom praxis 1996, Schiele & Schön Berlin 1996, Jörg Pan: "Conditional Access" or "How to Access Control broadcasts? "

In addition, with the introduction of new transmission media such as DAB and DVB-T, pay services are increasingly also available to mobile customers who, for. B. carry a corresponding device in your vehicle, interesting. However, the following problems arise here:

• - The data capacity of the services is limited (e.g. DAB, Swift and others),
• - The reception situation is difficult (e.g. due to not yet fully developed Radio networks or vehicles in underground parking)) or
• - A return channel is usually not available.

Technical task

The invention is therefore based on the object of specifying a method with which is a chip card from an authorized customer for changing for pay services can be made individually addressable, the pay services also for mobile customers should be made available.

Disclosure of the invention and its advantages:
The solution to the problem is that at the request of a service provider, i.e. an institution authorized to issue or sell security modules, such as. B. a T point to a service center responsible for authorization control, e.g. B. Data service center in the DAB, the service center with indirect activation either by telephone or remote data transmission system sends a security module specifically assigned EMM activation signal to the service provider and there this EMM activation signal for the relevant service in a control device the service provider feeds in and transferred to the security module and the security module is activated with this EMM activation signal via the control device or, if it is activated directly, the service center with the aid of a data transmission service in a digital broadcasting service such as the DAB single-wave network, the specifically assigned EMM -Sends the activation signal to the security module of the customer making the request and enables it. The invention is based on the advantage that the activation of a service on a security module such as a smart card by means of the respective transmission system, such as, for example, by using commercially available DAB or DVB receivers themselves, with direct activation, or with the aid of someone other than the sender Service is possible with indirect activation. The service center grants the authorization after payment of the corresponding data service fee by means of the above-mentioned direct or indirect activation via the smart card-specific EMM. A control device installed at the service provider confirms the activation of the security module, such as a smart card, for the service in question.

With direct and indirect activation, an assignment of a electronically stored, service-specific credit, token, in Monetary units are given up on the security module.

With indirect activation of the security module of the inquiring customers can advantageously the data transmission service z. B. via a landline Modem, via a GSM modem or via GSM SMS services.

Advantageously, the direct activation of the Security module of the inquiring customer with the help of the customer used mobile network, for example the GSM network, approximately localized and the specific EMM activation signal to activate the customer only be routed into the DAB single-wave network in which the customer is currently of the call and ordering the EMM activation signal.

This solves the problems mentioned above by realizing a return channel using GSM. The procedure for this is described using the example of DAB:

• 1. The customer reports z. B. via GSM from his car at the data service Center in the DAB to get an activation, for example for an individual Data service or for a subscription or if one is not received  Activation or assignment of electronic, service-specific Demand credit, token, on the smart card.
• 2. In the data service center in the DAB, for example, B. with a GSM operator (e.g. T-Mobil) the GSM cell (or in this way the larger DAB single-wave network) in which the caller is located just stopping.
• 3. The corresponding EMM with the activation becomes the DAB Routed single-frequency network in which the participant is located.

The advantages of the method according to the invention are thus particularly in it see: EMMs no longer have to be broadcast nationwide, just still locally in the DAB coverage areas in which the subscriber is also stops. This significantly reduces the data rate required for EMMs. At a call ensures that the caller can also receive the EMM because the possibility of establishing a GSM connection of DAB reception can close. Another important advantage is that there is a return channel for new services.

The EMMs z. B. not sent over a GSM channel, as this is a Require data connection between the mobile phone and the DAB receiver would, which is theoretically conceivable.

Industrial applicability

The method according to the invention is particularly for the release of customers relevant access authorizations in conditional access systems for Reception of fee-based media services commercially applicable.

Claims (4)

1.Procedures for activating customer-relevant access authorizations in conditional access systems for the reception of chargeable services, such as pay-TV, digital data broadcast via radio in DAB, DVB, Swift and video-on-demand, using security modules such as smart cards, on which security algorithms and / or customer-specific authorizations are stored in the form of software programs and data, characterized in that, at the request of a service provider, i.e. an institution authorized to sell security modules, to a service center responsible for authorization control, the service Center with indirect activation either via telephone or data transmission system sends an EMM activation signal specifically assigned to this security module to the service provider and there feeds this EMM activation signal for the media service concerned into a control device of the service provider and to the security The module is abandoned and the security module is activated with this EMM activation signal via the control device, or if the activation is directly activated, the service center sends the specifically assigned EMM activation signal to the security module of the requesting customer with the help of another data transmission service in a digital broadcasting service and enables the customer. 2. The method according to claim 1, characterized in that in direct and indirect activation an assignment of an electronically stored, service-specific credit (token) in monetary units on the security module is abandoned.   3. The method according to claim 1, characterized in that with indirect Activation of the security module of the inquiring customer Data transmission service optionally via a landline modem GSM modem, or via GSM SMS services. 4. The method according to claim 1 or 2, characterized in that in direct Activation of the security module of the customer making the request About a digital cellular network is located and that specific EMM activation signal to activate the customer only in the digital broadcast network is routed in which the customer is at the time of the call and orders the EMM activation signal.