US20060182279A1 - Secure conditional access port interface - Google Patents
Secure conditional access port interface Download PDFInfo
- Publication number
- US20060182279A1 US20060182279A1 US11/398,406 US39840606A US2006182279A1 US 20060182279 A1 US20060182279 A1 US 20060182279A1 US 39840606 A US39840606 A US 39840606A US 2006182279 A1 US2006182279 A1 US 2006182279A1
- Authority
- US
- United States
- Prior art keywords
- transceiver
- receiver
- engine
- descrambling
- unit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/436—Interfacing a local distribution network, e.g. communicating with another STB or one or more peripheral devices inside the home
- H04N21/4367—Establishing a secure communication between the client and a peripheral device or smart card
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/41—Structure of client; Structure of client peripherals
- H04N21/426—Internal components of the client ; Characteristics thereof
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream, rendering scenes according to MPEG-4 scene graphs
- H04N21/4408—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream, rendering scenes according to MPEG-4 scene graphs involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/16—Analogue secrecy systems; Analogue subscription systems
- H04N7/162—Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
- H04N7/163—Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing by receiver means only
Definitions
- Digital broadcast systems include direct broadcast digital satellite systems, interactive World Wide Web (“Web”) access systems, and digital cable systems. Digital broadcasting provides a number of advantages to subscribers, such as variety and flexibility of programming, useful and comprehensive support services (such as detailed electronic programming guides), and superior audio and video quality.
- Web World Wide Web
- Digital broadcasting provides a number of advantages to subscribers, such as variety and flexibility of programming, useful and comprehensive support services (such as detailed electronic programming guides), and superior audio and video quality.
- the Conditional Access (CA) function of a digital broadcast system allows selective access, for a fee, to premium services such as pay-per-view movies and events.
- premium services such as pay-per-view movies and events.
- the producers of the movies, events, etc. require that access to the premium services be controlled in order to protect their commercial interests as well as to enforce copyrights and protect copyright ownership.
- the digital broadcast system operators also referred to as Multiple System Operators, MSOs
- MSOs Multiple System Operators
- Subscribers receive digital broadcasts (including satellite, cable and Web broadcasts) via set-top boxes or other similar consumer electronic equipment located in the subscriber's home.
- a subscriber can transmit messages to the MSO.
- the bi-directional set-top box generally, a “transceiver” or “intelligent transceiver”
- the subscriber selects a premium service, and the subscriber's selection as well as information needed for billing purposes is transmitted to the MSO.
- a “smart card” stores the information needed for billing, and on a periodic basis (perhaps once per month) an automatic connection is made between the transceiver and the MSO so that the billing information can be transmitted to the MSO.
- Digital broadcast content is vulnerable to unauthorized use and duplication (“pirating”) while it is being broadcast, or after it has been received and is being processed.
- the signal could be intercepted and displayed (or duplicated and rebroadcast) using a transceiver not provided by the MSO.
- the signal could be diverted within the transceiver so that the smart card is bypassed. In either case, copyrights are circumvented.
- the MSO is unaware of the unauthorized use and so does not have the information needed to collect the fees it is owed.
- MSOs typically broadcast a scrambled signal.
- the signal is descrambled in the transceiver using a key provided by the MSO in the smart card. Once descrambled, the signal is encrypted in the transceiver.
- sophisticated methods are available to circumvent them.
- FIG. 1 is a block diagram showing some of the elements in one embodiment of a prior art transceiver (e.g., a set-top box) (for clarity, not all of the elements of the set-top box are shown).
- Front-end unit 20 of the set-top box comprises a tuner (not shown), as well as other devices known in the art, for receiving a digital broadcast signal 90 .
- POD 10 point of deployment
- POD 10 typically is adapted to receive a smart card (not shown) that, as described above, can be used to provide billing information to the MSO.
- the smart card also typically contains a key provided by the MSO that is used to descramble digital broadcast signal 90 .
- POD 10 includes a descrambling/encryption unit 40 that uses the key provided by the MSO to descramble broadcast signal 90 (if the signal is scrambled). Descrambling/ encryption unit 40 also encrypts the signal (if the signal is not encrypted). It is appreciated that, in other prior art embodiments, descrambling/encryption unit 40 may consist of separate elements, one for descrambling and one for encrypting.
- Front-end unit 20 also includes decryption unit 50 for decrypting an encrypted broadcast signal before the signal is sent to audio/visual (A/V) decoder 30 .
- A/V decoder 30 is used for demultiplexing the signal and for decoding, for example, MPEG (Moving Picture Experts Group) video signals and/or Dolby AC3 audio signals.
- digital broadcast signal 90 is received by the set-top box at front-end unit 20 and forwarded to POD 10 .
- Broadcast signal 90 is descrambled by descrambling/encryption unit 40 .
- broadcast signal 90 is encrypted to prevent unauthorized duplication.
- decryption unit 50 is decrypted using decryption unit 50 so that it can be decoded (e.g., MPEG or AC3 decoding) in AN decoder 30 , and subsequently processed so that it can be viewed and/or listened to by an authorized subscriber.
- broadcast signal 90 is transmitted in the clear at point 12 (that is, it is not scrambled nor is it encrypted at this point).
- broadcast signal 90 can be intercepted and duplicated.
- unauthorized parties e.g., rebroadcast via the Internet, copied onto a compact disk, etc.
- the MSO may receive payment for a one-time use, subsequent use by unauthorized users is made without proper compensation to the MSO or the copyright owners.
- FIG. 2 illustrates some of the elements in another embodiment of a prior art set-top box (for clarity, not all of the elements are shown).
- Front-end unit 120 , descrambling/encryption unit 140 , POD 110 , decryption unit 150 , and A/V decoder 130 each function in a manner as described above in conjunction with FIG. 1 .
- decryption unit 150 is moved out of front-end unit 120 and closer to AN decoder 130 . Even so, there still remains a point 14 at which broadcast signal 190 is transmitted in the clear and can be intercepted by an unauthorized user.
- the prior art is problematic because the descrambled and decrypted signal that is output from the decryption unit may be intercepted and pirated by an unauthorized user between the front-end device and the functional block (e.g., the A/V decoder).
- the functional block e.g., the A/V decoder
- an apparatus and/or method that can prevent pirating of a descrambled and decrypted digital signal between a front-end device and a subsequent functional block (e.g., an audio/video decoding block).
- a subsequent functional block e.g., an audio/video decoding block.
- an apparatus and/or method that can address the above need and that can be implemented in a transceiver (e.g., a set-top box) used in a digital broadcast system.
- the present invention includes an apparatus and method thereof that satisfy the above needs.
- the present invention pertains to an apparatus and method thereof for providing a secure path for a digital signal in, for example, an intelligent transceiver such as a bi-directional set-top box.
- the present invention comprises an integrated circuit device with a functional block and a decryption engine integrated therein.
- the integrated circuit device (specifically, the decryption engine) receives an encrypted digital signal.
- the decryption engine is configured to decrypt the encrypted digital signal and to supply the decrypted digital signal to the functional block.
- a digital signal is received by an intelligent transceiver at a front-end device (comprising, for example, a tuner).
- the digital signal is descrambled (if it is scrambled) and encrypted (if it is not encrypted) by a first functional block (e.g., an interface card or point of deployment) coupled to the front-end device.
- a first functional block e.g., an interface card or point of deployment
- a second functional block used for processing (e.g., decoding) audio and/or visual (A/V) content within the digital signal.
- a decryption engine used for decrypting encrypted signals.
- Digital signals from the front-end device are received via the interface card (or point of deployment) by the decryption engine integral to the A/V decode block. There are no points between the interface card (point of deployment) and the decryption engine nor between the decryption engine and the A/V decode block at which a descrambled and decrypted signal can be intercepted, thus providing a secure interface between the front-end device and the A/V decode block.
- the digital signal is an audio/visual media signal delivered to the intelligent transceiver using, for example, a terrestrial line (e.g., a cable system), the World Wide Web (e.g., a connection to the Internet), or a wireless transmission (e.g., a satellite broadcast).
- a terrestrial line e.g., a cable system
- the World Wide Web e.g., a connection to the Internet
- a wireless transmission e.g., a satellite broadcast.
- the encrypted signal is encrypted using an encryption routine compliant with the Data Encryption Standard Electronic Code Book (DES ECB).
- DES ECB Data Encryption Standard Electronic Code Book
- FIG. 1 shows a block diagram showing one embodiment of a prior art set-top box according to the conventional art.
- FIG. 2 shows a block diagram showing another embodiment of a prior art set-top box according to the conventional art.
- FIG. 3A shows a block diagram of one embodiment of an intelligent transceiver upon which embodiments of the present invention may be practiced.
- FIG. 3B shows a block diagram of another embodiment of an intelligent transceiver upon which embodiments of the present invention may be practiced.
- FIG. 3C shows a perspective illustration of one embodiment of an intelligent transceiver upon which embodiments of the present invention may be practiced.
- FIG. 3D shows a perspective illustration of another embodiment of an intelligent transceiver upon which embodiments of the present invention may be practiced.
- FIG. 4 shows a block diagram of one embodiment of an intelligent transceiver in accordance with the present invention.
- FIG. 5 shows a flowchart of the steps in a process for providing a secure path for a data signal in accordance with one embodiment of the present invention.
- the present invention is described in the context of an intelligent transceiver (e.g., a set-top box) that can be used as part of a digital broadcast system. However, it is appreciated that the present invention may be utilized in other types of devices including consumer electronic devices where it may be necessary to decrypt and encrypt a digital signal.
- an intelligent transceiver e.g., a set-top box
- the present invention may be utilized in other types of devices including consumer electronic devices where it may be necessary to decrypt and encrypt a digital signal.
- FIG. 3A is a block diagram of one embodiment of an intelligent transceiver 300 (e.g., a set-top box) upon which embodiments of the present invention may be practiced.
- Intelligent transceiver 300 receives digital broadcast signal 370 from a digital broadcaster (not shown).
- Digital broadcast signal 370 is a media signal comprising audio and video content.
- Digital broadcast signal 370 can be delivered to intelligent transceiver 300 using any of the various mechanisms currently in use or envisioned, such as a terrestrial line (e.g., a cable system), the World Wide Web (e.g., a connection to the Internet), or a wireless transmission (e.g., a satellite broadcast).
- a number of different digital broadcast signal formats in use or envisioned can be used, such as the Advanced Television Systems Committee (ATSC) digital television format.
- ATSC Advanced Television Systems Committee
- intelligent transceiver 300 includes front-end block 310 coupled to bus 305 , conditional access block 330 coupled to front-end block 310 and bus 305 , audio/video (A/V) decode block 340 coupled to conditional access block 330 and bus 305 , graphics block 350 coupled to A/V decode block 340 and bus 305 , and central processing unit 360 coupled to bus 305 .
- Conditional access block 330 also referred to as a point of deployment (POD) or an interface card, is adapted to receive smart card 325 .
- POD point of deployment
- Bus 305 is an internal address/data bus for communicating digital information between the functional blocks of intelligent transceiver 300 .
- front-end block 310 contains one or more tuners for receiving digital broadcast signal 370 .
- front-end block 310 can contain a tuner for receiving a wireless transmission (e.g., a satellite broadcast) and another tuner for receiving a cable transmission.
- Front-end block 310 can also include a device (e.g., a modem) that allows a telephone or digital subscriber line (DSL) connection to be made to the World Wide Web so that a broadcast signal can be received via the Internet.
- DSL digital subscriber line
- central processing unit 360 contains a processor (not shown) for processing information and instructions.
- Central processing unit 360 also may contain random access memory, read only memory, one or more caches, a flash memory and the like (not shown) for storing information and instructions.
- Smart card 325 stores information needed by a cable system operator or digital broadcast system operator (e.g., a Multiple System Operator, MSO) in order to bill a subscriber for services used by the subscriber (for example, the viewing of a pay-per-view movie or event).
- MSO Multiple System Operator
- smart card 325 also includes a key that is used to descramble digital broadcast signal 370 (if the signal is scrambled).
- smart card 325 is inserted into conditional access block 330 ; however, it is appreciated that in other embodiments smart card 325 may be coupled in a -different manner to intelligent transceiver 300 (for example, it may be inserted into either front-end block 310 or A/V decode block 340 ).
- conditional access block 330 descrambles digital broadcast signal 370 .
- conditional access block 330 contains an encryption engine (not shown) that encrypts digital broadcast signal 370 .
- the encryption engine uses a well-known DES ECB (Data Encryption Standard Electronic Code Book) encryption routine and a key length of 56 bits.
- DES ECB Data Encryption Standard Electronic Code Book
- key length of 56 bits.
- the encryption engine may be incorporated elsewhere in intelligent transceiver 300 , such as in front-end block 310 .
- A/V decode block 340 is an integrated circuit device comprising a functional block and a decryption engine 345 integrated therein.
- Decryption engine 345 is integral with A/V decode block 340 (that is, as a single integrated circuit, or “chip”) and coupled to front-end block 310 via conditional access block 330 .
- the link between conditional access block 330 and A/V decode block 340 (specifically, decryption engine 345 ) is separate from bus 305 ; that is, there is a direct connection between conditional access block 330 and decryption engine 345 that bypasses bus 305 .
- Decryption engine 345 decrypts an encrypted signal (e.g., digital broadcast signal 370 ) received by A/V decode block 340 .
- the output of decryption engine 345 is a decrypted digital signal that is “in the clear.”
- the signal in the clear is transmitted within A/V decode block 340 for decoding.
- the signal in the clear is never transmitted outside the physical block comprising A/V decode block 340 and decryption engine 345 .
- the present invention provides a secure interface between conditional access block 330 and decryption engine 345 and also between decryption engine 345 and AN decode block 340 , and thus between front-end block 310 and AN decode block 340 .
- the present invention can prevent pirating of a descrambled and decrypted digital signal.
- AN decode block 340 receives encrypted digital broadcast signal 370 from conditional access block 330 , decrypts the signal using decryption engine 345 , and decodes the video content and the audio content of digital broadcast signal 370 .
- an MPEG (Moving Pictures Experts Group) video decoder and an AC3 (Digital Dolby) audio decoder are used; however, it is appreciated that other video or audio decoders can be used in accordance with the present invention.
- AN decode block 340 is capable of handling video and audio analog signals.
- graphics block 350 The inputs to graphics block 350 are the decoded video and audio digital signals from AN decode block 340 .
- graphics block 350 also receives external audio and video analog inputs.
- Graphics block 350 processes the audio and video information and provides the output to, for example, a television set or a computer system (not shown) where it can be viewed and listened to.
- FIG. 3B is a block diagram of another embodiment of intelligent transceiver 300 upon which embodiments of the present invention may be practiced.
- point of deployment (POD) 320 is separate from conditional access block 330
- smart card 325 is plugged into POD 320 instead of conditional access block 330 .
- Smart card 325 contains a key for descrambling digital broadcast signal 370 , and this key is used by POD 320 to descramble digital broadcast signal 370 .
- POD 320 also encrypts digital broadcast signal 370 using an encryption engine (not shown).
- POD 320 is separate from conditional access block 330 in this embodiment, conditional access block 330 can still exist in intelligent transceiver 300 .
- FIG. 3C is an illustration of the embodiment of intelligent transceiver 300 of FIG. 3B , upon which embodiments of the present invention may be practiced.
- smart card 325 is inserted into POD 320 , which is inserted into slot 390 .
- Digital broadcast signal 370 is received by intelligent transceiver 300 and forwarded to POD 320 , where it is descrambled and encrypted using a key provided by smart card 325 . Subsequently, the digital signal is decrypted and the audio and visual content are decoded and processed by intelligent transceiver 300 as described above, and the result (output 380 ) is sent to, for example, a television (not shown) or similar device.
- FIG. 3D is an illustration of the embodiment of intelligent transceiver 300 of FIG. 3A , upon which embodiments of the present invention may be practiced.
- smart card 325 is inserted into an interface card (e.g., conditional access block 330 of FIG. 3A ) which is built into intelligent transceiver 300 .
- Digital broadcast signal 370 is received by intelligent transceiver 300 and forwarded to conditional access block 330 , where it is descrambled and encrypted using a key provided by smart card 325 .
- the digital signal is decrypted and the audio and visual content are decoded and processed by intelligent transceiver 300 as described above, and the result (output 380 ) is sent to, for example, a television (not shown) or similar device.
- FIG. 4 is a block diagram of an intelligent transceiver 400 (e.g., a bi-directional set-top box) showing additional details of the embodiments illustrated by FIGS. 3A and 3B .
- Table 1 is a list of the various elements and acronyms contained in FIG. 4 .
- TABLE 1 Elements and Acronyms of Intelligent Transceiver Embodied in FIG. 4 AVDAC Audio Video Digital-to-Analog Converter BTSC Broadcast Television Systems Committee D-Cache Data Cache DAVIC Digital Audio Visual Council DOCSIS Data Over Cable Service Interface Specification DSM Diplexer, Splitter Module DSP Digital Signal Processor DVD Digital Video Disk FAT Forward Application Tuner FPU Floating Point Unit I/F Interface IDCT Inverse Discrete Cosine Transform Inst.
- front-end block 310 receives a scrambled digital broadcast signal (e.g., digital broadcast signal 370 of FIGS. 3A and 3B ) from a digital broadcaster via in-band tuner 401 , OOB tuner 402 and/or MCNS FAT tuner 403 .
- Smart card 325 includes a key to descramble the digital broadcast signal. It is appreciated that FIG. 4 shows, in a combined form, both of the embodiments illustrated by FIGS. 3A and 3B . In the case of the embodiment illustrated by FIG. 3A , smart card 325 is inserted into conditional access block 330 , and conditional access block 330 descrambles and encrypts the digital broadcast signal.
- smart card 325 is plugged into POD 320 .
- the descrambling and encrypting functions are performed in POD 320 , and so these functions are bypassed in conditional access block 330 .
- the encrypted digital signal is delivered to AN decode block 340 via conditional access block 330 .
- decryption engine 345 is integrated into demultiplexer (“demux”) 410 , which is itself integrated into A/V decode block 340 .
- Decryption engine 345 contains an decryption engine for decrypting digital broadcast signal 370 .
- Decryption engine 345 is integral with AN decode block 340 and is coupled to front-end block 310 via conditional access block 330 .
- Decryption engine 345 decrypts an encrypted signal (e.g., digital broadcast signal 370 ) received by A/V decode block 340 via conditional access block 330 .
- the in-the-clear signal is immediately transmitted within the integrated circuit of A/V decode block 340 for decoding.
- the in-the-clear signal is never transmitted outside the physical block comprising A/V decode block 340 and decryption engine 345 .
- decryption engine 345 provides the interface between A/V decode block 340 and conditional access block 330 . It is appreciated that in other embodiments integrated circuit 345 may be integrated into AN decode block 340 in some different manner (that is, in a location other than demux 410 ) while still providing the interface with conditional access block 330 .
- the present invention provides a secure interface between conditional access block 330 and decryption engine 345 and between decryption engine 345 and A/V decode block 340 , and thus between front-end block 310 and A/V decode block 340 .
- an in-the-clear signal e.g., a decrypted and descrambled signal
- A/V decode block 340 includes an MPEG decoder (e.g., MP@ML DEC block 411 ) and an audio decoder (e.g., AC-3 block 412 ) to decode the video and audio content of digital broadcast signal 370 .
- Graphics block 350 processes the audio and video information received from A/V decode block 340 .
- Central processing unit 360 contains a processor (e.g., CPU core 430 ) and memory (e.g., instruction cache 420 ) for processing information and instructions used by intelligent transceiver 400 .
- FIG. 5 is a flowchart of the steps in a process 500 for providing a secure interface for a data signal in accordance with one embodiment of the present invention.
- process 500 is implemented as program instructions that are stored in memory (e.g., instruction cache 420 ) and executed by a processor (e.g., CPU core 430 ) of intelligent transceiver 400 . It is appreciated that process 500 may be utilized in other types of devices, including consumer electronic devices, where it may be necessary to decrypt and encrypt a digital signal.
- a digital broadcast signal (e.g., digital broadcast signal 370 ) is received by intelligent transceiver 300 .
- digital broadcast signal 370 is received by front-end block 310 .
- digital broadcast signal 370 is scrambled but not encrypted when it is received by intelligent transceiver 300 .
- digital broadcast signal 370 is sent from front-end block 310 to a first functional block, where the signal is descrambled.
- digital broadcast signal 370 is sent from front-end block 310 to conditional access block 330 .
- digital broadcast signal 370 is sent from front-end block 310 to POD 320 .
- a smart card e.g., smart card 325
- Smart card 325 contains a key that is used to descramble digital broadcast signal 370 .
- digital broadcast signal 370 is encrypted.
- conditional access block 330 contains an encryption engine that is used to encrypt digital broadcast signal 370 .
- POD 320 contains an encryption engine that is used to encrypt digital broadcast signal 370 .
- the encryption engine uses a well-known DES ECB encryption routine and a key length of 56 bits. However, it is appreciated that other encryption routines and different key lengths may be used in accordance with the present invention.
- digital broadcast signal 370 (now descrambled and encrypted) is sent from the first functional block (e.g., either conditional access block 330 of FIG. 3A or POD 320 of FIG. 3B ) to decryption engine 345 ( FIGS. 3A and 3B ), which is integral with a second functional block (e.g., A/V decode block 340 of FIGS. 3A and 3B ).
- digital broadcast signal 370 is sent from POD 320 to decryption engine 345 via conditional access block 330 .
- conditional access block 330 and decryption engine 345 are separate from bus 305 ; that is, there is a direct connection between conditional access block 330 and decryption engine 345 that bypasses bus 305 .
- decryption engine 345 of A/V decode block 340 decrypts digital broadcast signal 370 .
- the output of decryption engine 345 is a decrypted digital signal that is in the clear (e.g., a decrypted and descrambled signal).
- the signal in the clear is transmitted within A/V decode block 340 for decoding.
- the signal in the clear is never transmitted outside the physical block comprising A/V decode block 340 and decryption engine 345 .
- digital broadcast signal 370 (now decrypted and descrambled) is processed by A/V decode block 340 .
- A/V decode block 340 an MPEG (Moving Pictures Experts Group) video decoder and an AC3 (Digital Dolby) audio decoder are used; however, it is appreciated that other video or audio decoders can be used in accordance with the present invention.
- the output of AN decode block 340 is provided to graphics block 350 , where additional processing of the audio and video information is performed so that it can be displayed and/or listened to on a television set, computer system, or the like.
- the present invention provides an apparatus and method thereof for providing a secure path for a digital signal (e.g., digital broadcast signal 370 ) in, for example, an intelligent transceiver (e.g., intelligent transceiver 300 of FIGS. 3A and 3B ) such as a bi-directional set-top box (e.g., intelligent transceiver 400 of FIG. 4 ).
- an intelligent transceiver e.g., intelligent transceiver 300 of FIGS. 3A and 3B
- a bi-directional set-top box e.g., intelligent transceiver 400 of FIG. 4
- decryption engine 345 is integral with AN decode block 340 and coupled to front-end block 310 via conditional access block 330 , there is not a point for intercepting a signal that is in the clear between either front-end block 310 or conditional access block 330 and decryption engine 345 .
- decryption engine 345 is physically integrated with A/V decode block 340 , there is not a point for externally accessing and intercepting a signal that is in the clear between decryption engine 345 and A/V decode block 340 . Therefore, the present invention provides a secure interface between conditional access block 330 and decryption engine 345 and between decryption engine 345 and A/V decode block 340 , and thus between front-end block 310 and A/V decode block 340 . As such, the present invention can prevent pirating of a descrambled and decrypted digital signal.
Abstract
An apparatus and method thereof for providing a secure path for a digital signal in an intelligent transceiver such as a bi-directional set-top box. A digital signal (e.g., a broadcast signal or a signal received via a cable modem) is received by the intelligent transceiver at a front-end device (comprising, for example, a tuner). The digital signal is descrambled (if it is scrambled) and encrypted (if it is not encrypted) by a first functional block (e.g., an interface card or point of deployment) coupled to the front-end device. Coupled to the front-end device via the first functional block is a second functional block for processing (e.g., decoding) audio and/or visual content within the digital signal. Integrated into the second functional block is a decryption engine for decrypting encrypted signals. Signals from the front-end device are received via the first functional block by the decryption engine integral to the second functional block. There are no points between the first functional block and the decryption engine and between the decryption engine and the second functional block at which a descrambled and decrypted signal can be intercepted, thus providing a secure interface between the front-end device and the second functional block.
Description
- This is a continuation of U.S. patent application Ser. No. 09/538,568 filed March 29, 2000.
- Digital broadcast systems include direct broadcast digital satellite systems, interactive World Wide Web (“Web”) access systems, and digital cable systems. Digital broadcasting provides a number of advantages to subscribers, such as variety and flexibility of programming, useful and comprehensive support services (such as detailed electronic programming guides), and superior audio and video quality.
- The Conditional Access (CA) function of a digital broadcast system allows selective access, for a fee, to premium services such as pay-per-view movies and events. The producers of the movies, events, etc., require that access to the premium services be controlled in order to protect their commercial interests as well as to enforce copyrights and protect copyright ownership. The digital broadcast system operators (also referred to as Multiple System Operators, MSOs) also have a commercial interest in limiting access to these premium services to authorized users only.
- Subscribers receive digital broadcasts (including satellite, cable and Web broadcasts) via set-top boxes or other similar consumer electronic equipment located in the subscriber's home. With a bi-directional set-top box, in addition to receiving broadcasts, a subscriber can transmit messages to the MSO. Using the bi-directional set-top box (generally, a “transceiver” or “intelligent transceiver”), the subscriber selects a premium service, and the subscriber's selection as well as information needed for billing purposes is transmitted to the MSO. In a common implementation, a “smart card” stores the information needed for billing, and on a periodic basis (perhaps once per month) an automatic connection is made between the transceiver and the MSO so that the billing information can be transmitted to the MSO.
- Digital broadcast content is vulnerable to unauthorized use and duplication (“pirating”) while it is being broadcast, or after it has been received and is being processed. For example, during broadcast, the signal could be intercepted and displayed (or duplicated and rebroadcast) using a transceiver not provided by the MSO. On the other hand, even when a transceiver provided by the MSO is used, the signal could be diverted within the transceiver so that the smart card is bypassed. In either case, copyrights are circumvented. In addition, the MSO is unaware of the unauthorized use and so does not have the information needed to collect the fees it is owed.
- To prevent unauthorized use, MSOs typically broadcast a scrambled signal. The signal is descrambled in the transceiver using a key provided by the MSO in the smart card. Once descrambled, the signal is encrypted in the transceiver. However, even when such security measures are employed in an attempt to prevent pirating, sophisticated methods are available to circumvent them.
- Prior Art
FIG. 1 is a block diagram showing some of the elements in one embodiment of a prior art transceiver (e.g., a set-top box) (for clarity, not all of the elements of the set-top box are shown). Front-end unit 20 of the set-top box comprises a tuner (not shown), as well as other devices known in the art, for receiving a digital broadcast signal 90. Coupled to front-end unit 20 is point of deployment (POD) 10.POD 10 typically is adapted to receive a smart card (not shown) that, as described above, can be used to provide billing information to the MSO. The smart card also typically contains a key provided by the MSO that is used to descramble digital broadcast signal 90.POD 10 includes a descrambling/encryption unit 40 that uses the key provided by the MSO to descramble broadcast signal 90 (if the signal is scrambled). Descrambling/encryption unit 40 also encrypts the signal (if the signal is not encrypted). It is appreciated that, in other prior art embodiments, descrambling/encryption unit 40 may consist of separate elements, one for descrambling and one for encrypting. - Front-
end unit 20 also includesdecryption unit 50 for decrypting an encrypted broadcast signal before the signal is sent to audio/visual (A/V)decoder 30. A/V decoder 30 is used for demultiplexing the signal and for decoding, for example, MPEG (Moving Picture Experts Group) video signals and/or Dolby AC3 audio signals. - Thus, in this prior art embodiment, digital broadcast signal 90 is received by the set-top box at front-
end unit 20 and forwarded toPOD 10. Broadcast signal 90 is descrambled by descrambling/encryption unit 40. Once descrambled, broadcast signal 90 is encrypted to prevent unauthorized duplication. Further downstream in the set-top box, broadcast signal 90 is decrypted usingdecryption unit 50 so that it can be decoded (e.g., MPEG or AC3 decoding) inAN decoder 30, and subsequently processed so that it can be viewed and/or listened to by an authorized subscriber. - A problem with this prior art embodiment is that, between
decryption unit 50 andAN decoder 30, broadcast signal 90 is transmitted in the clear at point 12 (that is, it is not scrambled nor is it encrypted at this point). Thus, atpoint 12, broadcast signal 90 can be intercepted and duplicated. As a digital signal, it is possible to make near perfect copies which can be readily distributed to unauthorized parties (e.g., rebroadcast via the Internet, copied onto a compact disk, etc.). While the MSO may receive payment for a one-time use, subsequent use by unauthorized users is made without proper compensation to the MSO or the copyright owners. - Prior Art
FIG. 2 illustrates some of the elements in another embodiment of a prior art set-top box (for clarity, not all of the elements are shown). Front-end unit 120, descrambling/encryption unit 140,POD 110,decryption unit 150, and A/V decoder 130 each function in a manner as described above in conjunction withFIG. 1 . In this embodiment,decryption unit 150 is moved out of front-end unit 120 and closer toAN decoder 130. Even so, there still remains apoint 14 at whichbroadcast signal 190 is transmitted in the clear and can be intercepted by an unauthorized user. - Thus, the prior art is problematic because the descrambled and decrypted signal that is output from the decryption unit may be intercepted and pirated by an unauthorized user between the front-end device and the functional block (e.g., the A/V decoder).
- Accordingly, what is needed is an apparatus and/or method that can prevent pirating of a descrambled and decrypted digital signal between a front-end device and a subsequent functional block (e.g., an audio/video decoding block). What is also needed is an apparatus and/or method that can address the above need and that can be implemented in a transceiver (e.g., a set-top box) used in a digital broadcast system.
- The present invention includes an apparatus and method thereof that satisfy the above needs. These and other advantages of the present invention not specifically mentioned above will become clear within discussions of the present invention presented herein.
- The present invention pertains to an apparatus and method thereof for providing a secure path for a digital signal in, for example, an intelligent transceiver such as a bi-directional set-top box. In the present embodiment, the present invention comprises an integrated circuit device with a functional block and a decryption engine integrated therein. The integrated circuit device (specifically, the decryption engine) receives an encrypted digital signal. The decryption engine is configured to decrypt the encrypted digital signal and to supply the decrypted digital signal to the functional block. There is not a point between the decryption engine and the functional block at which the digital signal is in the clear (e.g., descrambled and decrypted) and is externally accessible, thereby providing a physically secure interface between the integrated circuit device and the functional block.
- In one embodiment, a digital signal is received by an intelligent transceiver at a front-end device (comprising, for example, a tuner). The digital signal is descrambled (if it is scrambled) and encrypted (if it is not encrypted) by a first functional block (e.g., an interface card or point of deployment) coupled to the front-end device. Coupled to the front-end device via the first functional block is a second functional block used for processing (e.g., decoding) audio and/or visual (A/V) content within the digital signal. Integrated into the second functional block is a decryption engine used for decrypting encrypted signals. Digital signals from the front-end device are received via the interface card (or point of deployment) by the decryption engine integral to the A/V decode block. There are no points between the interface card (point of deployment) and the decryption engine nor between the decryption engine and the A/V decode block at which a descrambled and decrypted signal can be intercepted, thus providing a secure interface between the front-end device and the A/V decode block.
- In one embodiment, the digital signal is an audio/visual media signal delivered to the intelligent transceiver using, for example, a terrestrial line (e.g., a cable system), the World Wide Web (e.g., a connection to the Internet), or a wireless transmission (e.g., a satellite broadcast).
- In one embodiment, the encrypted signal is encrypted using an encryption routine compliant with the Data Encryption Standard Electronic Code Book (DES ECB).
- Embodiments of the present invention are illustrated by way of example and not by way of limitation, in the figures of the accompanying drawings and in which like reference numerals refer to similar elements and in which:
-
FIG. 1 shows a block diagram showing one embodiment of a prior art set-top box according to the conventional art. -
FIG. 2 shows a block diagram showing another embodiment of a prior art set-top box according to the conventional art. -
FIG. 3A shows a block diagram of one embodiment of an intelligent transceiver upon which embodiments of the present invention may be practiced. -
FIG. 3B shows a block diagram of another embodiment of an intelligent transceiver upon which embodiments of the present invention may be practiced. -
FIG. 3C shows a perspective illustration of one embodiment of an intelligent transceiver upon which embodiments of the present invention may be practiced. -
FIG. 3D shows a perspective illustration of another embodiment of an intelligent transceiver upon which embodiments of the present invention may be practiced. -
FIG. 4 shows a block diagram of one embodiment of an intelligent transceiver in accordance with the present invention. -
FIG. 5 shows a flowchart of the steps in a process for providing a secure path for a data signal in accordance with one embodiment of the present invention. - In the following detailed description of the present invention, numerous specific details are set forth in order to provide a thorough understanding of the present invention. However, it will be recognized by one skilled in the art that the present invention may be practiced without these specific details or with equivalents thereof. In other instances, well known methods, procedures, components, and circuits have not been described in detail as not to unnecessarily obscure aspects of the present invention.
- Some portions of the detailed descriptions which follow are presented in terms of procedures, logic blocks, processing, and other symbolic representations of operations on data bits within an intelligent electronic media device. These descriptions and representations are the means used by those skilled in the data processing arts to most effectively convey the substance of their work to others skilled in the art. A procedure, logic block, process, etc., is herein, and generally, conceived to be a self-consistent sequence of steps or instructions leading to a desired result. The steps are those requiring physical manipulations of physical quantities. Usually, though not necessarily, these physical manipulations take the form of electrical or magnetic signals capable of being stored, transferred, combined, compared, and otherwise manipulated in a consumer electronic media device. For reasons of convenience, and with reference to common usage, these signals are referred to as bits, values, elements, symbols, characters, terms, numbers, or the like with reference to the present invention.
- It should be borne in mind, however, that all of these terms are to be interpreted as referencing physical manipulations and quantities and are merely convenient labels and are to be interpreted further in view of terms commonly used in the art. Unless specifically stated otherwise as apparent from the following discussions, it is understood that throughout discussions of the present invention, discussions utilizing terms such as “receiving” or “encrypting” or “decrypting” or “descrambling” or “decoding” or the like, refer to the action and processes (e.g.,
process 500 ofFIG. 5 ) of an electronic device such as a microcontroller or similar electronic computing device (e.g., dedicated or embedded computer system) that manipulates and transforms data. The data are represented as physical (electronic) quantities within the electronic device's registers and memories and is transformed into other data similarly represented as physical quantities within the electronic device memories or registers or other such information storage, transmission, or display screens. - The present invention is described in the context of an intelligent transceiver (e.g., a set-top box) that can be used as part of a digital broadcast system. However, it is appreciated that the present invention may be utilized in other types of devices including consumer electronic devices where it may be necessary to decrypt and encrypt a digital signal.
-
FIG. 3A is a block diagram of one embodiment of an intelligent transceiver 300 (e.g., a set-top box) upon which embodiments of the present invention may be practiced.Intelligent transceiver 300 receives digital broadcast signal 370 from a digital broadcaster (not shown). Digital broadcast signal 370 is a media signal comprising audio and video content. Digital broadcast signal 370 can be delivered tointelligent transceiver 300 using any of the various mechanisms currently in use or envisioned, such as a terrestrial line (e.g., a cable system), the World Wide Web (e.g., a connection to the Internet), or a wireless transmission (e.g., a satellite broadcast). In accordance with the present invention, a number of different digital broadcast signal formats in use or envisioned can be used, such as the Advanced Television Systems Committee (ATSC) digital television format. - In the present embodiment,
intelligent transceiver 300 includes front-end block 310 coupled tobus 305,conditional access block 330 coupled to front-end block 310 andbus 305, audio/video (A/V)decode block 340 coupled toconditional access block 330 andbus 305, graphics block 350 coupled to A/V decode block 340 andbus 305, andcentral processing unit 360 coupled tobus 305.Conditional access block 330, also referred to as a point of deployment (POD) or an interface card, is adapted to receivesmart card 325. -
Bus 305 is an internal address/data bus for communicating digital information between the functional blocks ofintelligent transceiver 300. In the present embodiment, front-end block 310 contains one or more tuners for receiving digital broadcast signal 370. For example, in one embodiment, front-end block 310 can contain a tuner for receiving a wireless transmission (e.g., a satellite broadcast) and another tuner for receiving a cable transmission. Front-end block 310 can also include a device (e.g., a modem) that allows a telephone or digital subscriber line (DSL) connection to be made to the World Wide Web so that a broadcast signal can be received via the Internet. - In the present embodiment,
central processing unit 360 contains a processor (not shown) for processing information and instructions.Central processing unit 360 also may contain random access memory, read only memory, one or more caches, a flash memory and the like (not shown) for storing information and instructions. -
Smart card 325 stores information needed by a cable system operator or digital broadcast system operator (e.g., a Multiple System Operator, MSO) in order to bill a subscriber for services used by the subscriber (for example, the viewing of a pay-per-view movie or event). Typically,smart card 325 also includes a key that is used to descramble digital broadcast signal 370 (if the signal is scrambled). In the present embodiment,smart card 325 is inserted intoconditional access block 330; however, it is appreciated that in other embodimentssmart card 325 may be coupled in a -different manner to intelligent transceiver 300 (for example, it may be inserted into either front-end block 310 or A/V decode block 340). Using the key fromsmart card 325,conditional access block 330 descrambles digital broadcast signal 370. - Because digital broadcast signal 370 has been descrambled, the signal must be encrypted in order to prevent its unauthorized use and duplication. In the present embodiment,
conditional access block 330 contains an encryption engine (not shown) that encrypts digital broadcast signal 370. In one embodiment, the encryption engine uses a well-known DES ECB (Data Encryption Standard Electronic Code Book) encryption routine and a key length of 56 bits. However, it is appreciated that other well-known and commercially available encryption routines and different key lengths may be used in accordance with the present invention. It is further appreciated the encryption engine may be incorporated elsewhere inintelligent transceiver 300, such as in front-end block 310. - In accordance with the present invention, A/
V decode block 340 is an integrated circuit device comprising a functional block and adecryption engine 345 integrated therein.Decryption engine 345 is integral with A/V decode block 340 (that is, as a single integrated circuit, or “chip”) and coupled to front-end block 310 viaconditional access block 330. In the present embodiment, the link betweenconditional access block 330 and A/V decode block 340 (specifically, decryption engine 345) is separate frombus 305; that is, there is a direct connection betweenconditional access block 330 anddecryption engine 345 that bypassesbus 305. -
Decryption engine 345 decrypts an encrypted signal (e.g., digital broadcast signal 370) received by A/V decode block 340. The output ofdecryption engine 345 is a decrypted digital signal that is “in the clear.” The signal in the clear is transmitted within A/V decode block 340 for decoding. The signal in the clear is never transmitted outside the physical block comprising A/V decode block 340 anddecryption engine 345. - Thus, there is not a point for intercepting a signal that is in the clear (e.g., a decrypted and descrambled signal) between
conditional access block 330 anddecryption engine 345, nor is there a point betweendecryption engine 345 and ANdecode block 340 where an in-the-clear signal can be externally accessed and intercepted. Therefore, the present invention provides a secure interface betweenconditional access block 330 anddecryption engine 345 and also betweendecryption engine 345 and ANdecode block 340, and thus between front-end block 310 and ANdecode block 340. As such, the present invention can prevent pirating of a descrambled and decrypted digital signal. - In the present embodiment, AN
decode block 340 receives encrypted digital broadcast signal 370 fromconditional access block 330, decrypts the signal usingdecryption engine 345, and decodes the video content and the audio content of digital broadcast signal 370. In the present embodiment, an MPEG (Moving Pictures Experts Group) video decoder and an AC3 (Digital Dolby) audio decoder are used; however, it is appreciated that other video or audio decoders can be used in accordance with the present invention. In addition, in one embodiment, ANdecode block 340 is capable of handling video and audio analog signals. - The inputs to graphics block 350 are the decoded video and audio digital signals from AN
decode block 340. In one embodiment, graphics block 350 also receives external audio and video analog inputs. Graphics block 350 processes the audio and video information and provides the output to, for example, a television set or a computer system (not shown) where it can be viewed and listened to. -
FIG. 3B is a block diagram of another embodiment ofintelligent transceiver 300 upon which embodiments of the present invention may be practiced. In this embodiment, point of deployment (POD) 320 is separate fromconditional access block 330, andsmart card 325 is plugged intoPOD 320 instead ofconditional access block 330.Smart card 325 contains a key for descrambling digital broadcast signal 370, and this key is used byPOD 320 to descramble digital broadcast signal 370.POD 320 also encrypts digital broadcast signal 370 using an encryption engine (not shown). AlthoughPOD 320 is separate fromconditional access block 330 in this embodiment,conditional access block 330 can still exist inintelligent transceiver 300. -
FIG. 3C is an illustration of the embodiment ofintelligent transceiver 300 ofFIG. 3B , upon which embodiments of the present invention may be practiced. In this embodiment,smart card 325 is inserted intoPOD 320, which is inserted intoslot 390. Digital broadcast signal 370 is received byintelligent transceiver 300 and forwarded toPOD 320, where it is descrambled and encrypted using a key provided bysmart card 325. Subsequently, the digital signal is decrypted and the audio and visual content are decoded and processed byintelligent transceiver 300 as described above, and the result (output 380) is sent to, for example, a television (not shown) or similar device. -
FIG. 3D is an illustration of the embodiment ofintelligent transceiver 300 ofFIG. 3A , upon which embodiments of the present invention may be practiced. In this embodiment,smart card 325 is inserted into an interface card (e.g.,conditional access block 330 ofFIG. 3A ) which is built intointelligent transceiver 300. Digital broadcast signal 370 is received byintelligent transceiver 300 and forwarded toconditional access block 330, where it is descrambled and encrypted using a key provided bysmart card 325. Subsequently, the digital signal is decrypted and the audio and visual content are decoded and processed byintelligent transceiver 300 as described above, and the result (output 380) is sent to, for example, a television (not shown) or similar device. -
FIG. 4 is a block diagram of an intelligent transceiver 400 (e.g., a bi-directional set-top box) showing additional details of the embodiments illustrated byFIGS. 3A and 3B . Table 1 is a list of the various elements and acronyms contained inFIG. 4 .TABLE 1 Elements and Acronyms of Intelligent Transceiver Embodied in FIG. 4 AVDAC Audio Video Digital-to-Analog Converter BTSC Broadcast Television Systems Committee D-Cache Data Cache DAVIC Digital Audio Visual Council DOCSIS Data Over Cable Service Interface Specification DSM Diplexer, Splitter Module DSP Digital Signal Processor DVD Digital Video Disk FAT Forward Application Tuner FPU Floating Point Unit I/F Interface IDCT Inverse Discrete Cosine Transform Inst. Cache Instruction Cache Int. Cont. Interrupt Controller MAC Media Access Control MC Motion Compensation MCNS Multiple Cable Network System MIDI Musical Instrument Digital Interface MP@ML Main Profile at Main Level OOB Out of Band PCI Peripheral Component Interconnect PCM Pulse Coded Modulation PLL Phase Locked Loop QPSK Quadrature Phase Shift Keying QPSKQAM QPSK Quadrature Amplitude Modulation RTC Real Time Clock SLIC Serial Line Internet Connection UART Universal Asynchronous Receiver-Transmitter VBI Vertical Blanking Interval VIF/SIF Video Intermediate Frequency/ Sound Intermediate Frequency - With reference to
FIG. 4 , in the present embodiment, front-end block 310 receives a scrambled digital broadcast signal (e.g., digital broadcast signal 370 ofFIGS. 3A and 3B ) from a digital broadcaster via in-band tuner 401,OOB tuner 402 and/orMCNS FAT tuner 403.Smart card 325 includes a key to descramble the digital broadcast signal. It is appreciated thatFIG. 4 shows, in a combined form, both of the embodiments illustrated byFIGS. 3A and 3B . In the case of the embodiment illustrated byFIG. 3A ,smart card 325 is inserted intoconditional access block 330, andconditional access block 330 descrambles and encrypts the digital broadcast signal. In the case of the embodiment illustrated byFIG. 3B ,smart card 325 is plugged intoPOD 320. In this latter embodiment, the descrambling and encrypting functions are performed inPOD 320, and so these functions are bypassed inconditional access block 330. - Continuing with reference to
FIG. 4 , the encrypted digital signal is delivered to ANdecode block 340 viaconditional access block 330. In the present embodiment of the present invention,decryption engine 345 is integrated into demultiplexer (“demux”) 410, which is itself integrated into A/V decode block 340.Decryption engine 345 contains an decryption engine for decrypting digital broadcast signal 370.Decryption engine 345 is integral with ANdecode block 340 and is coupled to front-end block 310 viaconditional access block 330.Decryption engine 345 decrypts an encrypted signal (e.g., digital broadcast signal 370) received by A/V decode block 340 viaconditional access block 330. The in-the-clear signal is immediately transmitted within the integrated circuit of A/V decode block 340 for decoding. The in-the-clear signal is never transmitted outside the physical block comprising A/V decode block 340 anddecryption engine 345. In the present embodiment,decryption engine 345 provides the interface between A/V decode block 340 andconditional access block 330. It is appreciated that in other embodiments integratedcircuit 345 may be integrated into ANdecode block 340 in some different manner (that is, in a location other than demux 410) while still providing the interface withconditional access block 330. - As explained above, in accordance with the present invention, there is not a point for intercepting an in-the-clear signal (e.g., a decrypted and descrambled signal) between
conditional access block 330 anddecryption engine 345, nor betweendecryption engine 345 and ANdecode block 340. Therefore, the present invention provides a secure interface betweenconditional access block 330 anddecryption engine 345 and betweendecryption engine 345 and A/V decode block 340, and thus between front-end block 310 and A/V decode block 340. - Continuing with reference to
FIG. 4 , in the present embodiment, A/V decode block 340 includes an MPEG decoder (e.g., MP@ML DEC block 411) and an audio decoder (e.g., AC-3 block 412) to decode the video and audio content of digital broadcast signal 370. Graphics block 350 processes the audio and video information received from A/V decode block 340.Central processing unit 360 contains a processor (e.g., CPU core 430) and memory (e.g., instruction cache 420) for processing information and instructions used byintelligent transceiver 400. -
FIG. 5 is a flowchart of the steps in aprocess 500 for providing a secure interface for a data signal in accordance with one embodiment of the present invention. With reference also toFIG. 4 , in the present embodiment,process 500 is implemented as program instructions that are stored in memory (e.g., instruction cache 420) and executed by a processor (e.g., CPU core 430) ofintelligent transceiver 400. It is appreciated thatprocess 500 may be utilized in other types of devices, including consumer electronic devices, where it may be necessary to decrypt and encrypt a digital signal. - In
step 505 ofFIG. 5 , with reference also toFIGS. 3A and 3B , a digital broadcast signal (e.g., digital broadcast signal 370) is received byintelligent transceiver 300. In the present embodiment, digital broadcast signal 370 is received by front-end block 310. Typically, digital broadcast signal 370 is scrambled but not encrypted when it is received byintelligent transceiver 300. - In
step 510, in the present embodiment, digital broadcast signal 370 is sent from front-end block 310 to a first functional block, where the signal is descrambled. In the embodiment ofFIG. 3A , digital broadcast signal 370 is sent from front-end block 310 toconditional access block 330. In the embodiment ofFIG. 3B , digital broadcast signal 370 is sent from front-end block 310 toPOD 320. Depending on the embodiment, a smart card (e.g., smart card 325) is coupled toconditional access block 330 orPOD 320.Smart card 325 contains a key that is used to descramble digital broadcast signal 370. - In
step 515, in the present embodiment, digital broadcast signal 370 is encrypted. In the embodiment ofFIG. 3A ,conditional access block 330 contains an encryption engine that is used to encrypt digital broadcast signal 370. In the embodiment ofFIG. 3B ,POD 320 contains an encryption engine that is used to encrypt digital broadcast signal 370. In one embodiment, the encryption engine uses a well-known DES ECB encryption routine and a key length of 56 bits. However, it is appreciated that other encryption routines and different key lengths may be used in accordance with the present invention. - In
step 520 ofFIG. 5 , in the present embodiment, digital broadcast signal 370 (now descrambled and encrypted) is sent from the first functional block (e.g., eitherconditional access block 330 ofFIG. 3A orPOD 320 ofFIG. 3B ) to decryption engine 345 (FIGS. 3A and 3B ), which is integral with a second functional block (e.g., A/V decode block 340 ofFIGS. 3A and 3B ). In the embodiment ofFIG. 3B , digital broadcast signal 370 is sent fromPOD 320 todecryption engine 345 viaconditional access block 330. In each of the embodiments ofFIGS. 3A and 3B , the link betweenconditional access block 330 anddecryption engine 345 is separate frombus 305; that is, there is a direct connection betweenconditional access block 330 anddecryption engine 345 that bypassesbus 305. - In
step 525 ofFIG. 5 ,decryption engine 345 of A/V decode block 340 decrypts digital broadcast signal 370. The output ofdecryption engine 345 is a decrypted digital signal that is in the clear (e.g., a decrypted and descrambled signal). The signal in the clear is transmitted within A/V decode block 340 for decoding. The signal in the clear is never transmitted outside the physical block comprising A/V decode block 340 anddecryption engine 345. Thus, there is not a point for intercepting a signal that is in the clear betweenconditional access block 330 anddecryption engine 345, nor is there a point betweendecryption engine 345 and A/V decode block 340 where an in-the-clear signal can be externally accessed and intercepted. - In
step 530, digital broadcast signal 370 (now decrypted and descrambled) is processed by A/V decode block 340. In the present embodiment, an MPEG (Moving Pictures Experts Group) video decoder and an AC3 (Digital Dolby) audio decoder are used; however, it is appreciated that other video or audio decoders can be used in accordance with the present invention. The output of ANdecode block 340 is provided to graphics block 350, where additional processing of the audio and video information is performed so that it can be displayed and/or listened to on a television set, computer system, or the like. - In summary, the present invention provides an apparatus and method thereof for providing a secure path for a digital signal (e.g., digital broadcast signal 370) in, for example, an intelligent transceiver (e.g.,
intelligent transceiver 300 ofFIGS. 3A and 3B ) such as a bi-directional set-top box (e.g.,intelligent transceiver 400 ofFIG. 4 ). Becausedecryption engine 345 is integral with ANdecode block 340 and coupled to front-end block 310 viaconditional access block 330, there is not a point for intercepting a signal that is in the clear between either front-end block 310 orconditional access block 330 anddecryption engine 345. In addition, becausedecryption engine 345 is physically integrated with A/V decode block 340, there is not a point for externally accessing and intercepting a signal that is in the clear betweendecryption engine 345 and A/V decode block 340. Therefore, the present invention provides a secure interface betweenconditional access block 330 anddecryption engine 345 and betweendecryption engine 345 and A/V decode block 340, and thus between front-end block 310 and A/V decode block 340. As such, the present invention can prevent pirating of a descrambled and decrypted digital signal. - The preferred embodiment of the present invention, secure conditional access port interface, is thus described. While the present invention has been described in particular embodiments, it should be appreciated that the present invention should not be construed as limited by such embodiments, but rather construed according to the below claims.
Claims (47)
1. A transceiver comprising:
a front-end unit for receiving a digital broadcast including;
a tuner;
a demodulator; and
a descrambling/encryption unit for descrambling the received digital broadcast and encrypting the descrambled digital broadcast;
an audio/video unit, including;
a demultiplexor for demultiplexing content;
a decryption engine for decrypting the encrypted digital broadcast;
wherein the decrypted digital broadcast is not externally accessible.
2. The transceiver of claim 1 , further comprising a point of deployment (POD), coupled to the front-end unit and the audio/video unit.
3. The transceiver of claim 2 , wherein the point of deployment stores a first key used by the descrambling/encryption unit to descramble the digital broadcast.
4. The transceiver of claim 3 , wherein the point of deployment stores a second key used by the descrambling/encryption unit to encrypt the digital broadcast.
5. The transceiver of claim 1 , further comprising a direct connection between the front-end unit and the decryption engine in the audio/video unit for securely transferring the encrypted digital broadcast.
6. The transceiver of claim 1 , wherein the audio/video unit further includes:
a first decoder, coupled to the demultiplexor, for decoding audio content contained in the decrypted digital broadcast; and
a second decoder, coupled to the demultiplexor, for decoding video content contained in the decrypted digital broadcast.
7. The transceiver of claim 6 , wherein the audio content is substantially compliant with a version of the AC3 format.
8. The transceiver of claim 6 , wherein the video content is substantially compliant with a version of the MPEG (moving picture experts group) format.
9. The transceiver of claim 1 , wherein the encrypted digital broadcast is encrypted using an encryption routine substantially compliant with DES ECB (data encryption standard electronic code book).
10. The transceiver of claim 1 , further comprising:
a processor coupled to the audio/video unit; and
a memory unit coupled to the processor.
11. A transceiver comprising:
a point of deployment (POD) for descrambling a digital signal and encrypting the descrambled digital signal; and
a decryptor/encryptor for descrambling the digital signal from the POD and re-encrypting the digital signal,
an audio/video unit for decrypting the encrypted digital signal from the decryptor/encryptor and decoding the decrypted digital signal, wherein the decrypted digital signal is protected against external access and interception.
12. The transceiver of claim 11 , wherein the audio/video unit comprises an integrated circuit that includes a decryption engine and a functional block.
13. The transceiver of claim 11 , wherein the point of deployment further collects and transmits billing information related to the digital signal to a service provider.
14. The transceiver of claim 11 , further comprising a link for securely transmitting the encrypted digital signal from an encryption engine of the point of deployment to the decryption engine of the audio/video unit.
15. The transceiver of claim 11 , further comprising a front-end unit for receiving the digital signal.
16. The transceiver of claim 15 , wherein the digital signal is received from one or more systems consisting of a broadcast system, a satellite system, a cable system, a terrestrial line system, and a wireless transmission system.
17. The transceiver of claim 11 , further comprising a smart card, coupled to the point of deployment, for storing the billing information and a key used for descrambling the digital signal.
18. A transceiver comprising:
a smart card for storing a key;
a descrambling unit, coupled to the smart card, for descrambling a digital media signal using the key;
an encryption engine, coupled to the descrambling unit, for encrypting the descrambled digital media signal;
an audio/video integrated circuit, coupled to the encryption unit comprising;
a decryption engine for decrypting the encrypted digital media signal; and
a functional block, coupled to the decryption engine, for processing the decrypted digital media signal.
19. The transceiver of claim 18 , further comprising a conditional access block comprising the descrambling unit and the encryption unit.
20. The transceiver of claim 18 , further comprising a front-end unit comprising:
a tuner, coupled to the descrambling unit, for receiving the digital media signal
the descrambling unit; and
the encryption engine.
21. The transceiver of claim 18 , further comprising a link between the encryption engine and the audio/video integrated circuit for securely transmitting the encrypted digital media signal from the encryption engine to the decryption engine.
22. The transceiver of claim 18 , wherein the function block comprises:
a first decoder for decoding audio content in the decrypted digital media signal; and
a second decoder for decoding video content contained in the decrypted digital media signal.
23. The transceiver of claim 18 , wherein a point for intercepting the digital signal in the clear between the descrambling unit and the function block in not present.
24. The transceiver of claim 18 , wherein the smart card further stores billing information.
25. A receiver comprising:
a front-end unit including;
a network interface for receiving content;
a unit containing a descrambler for removing network-level security and a re-scrambler for applying receiver-level security to the content;
an audio/video unit, including;
a second descrambler for removing the applied receiver-level security; and
a decoder to decompress the content.
26. The receiver of claim 25 , where the network interface is a tuner.
27. The receiver of claim 26 , where the network interface also includes a demodulator to demodulate a stream of the content.
28. The receiver of claim 25 , where the network interface is a connection to the Internet.
29. The receiver of claim 28 , where the connection is Ethernet.
30. The receiver of claim 25 , where the descrambler that removes network-level security descrambles a stream of the content from a conditional access module that is coupled to the front-end unit.
31. The receiver of claim 25 , where the descrambler that removes network-level security receives a clear stream of the content from a conditional access module that is coupled to the front-end unit.
32. The receiver of claim 31 , where the conditional access module is a Point of Deployment (POD) module.
33. The receiver of claim 25 , where the descrambler that removes network-level security receives keys from a smart card coupled to the front-end unit.
34. The receiver of claim 25 , further comprising a direct connection between the re-scrambler in the front-end unit and the second descrambler in the audio/video unit for securely transferring the receiver-level security protected steam of the content.
35. A receiver comprising:
a conditional access module for descrambling a digital signal and for re-scrambling the descrambled digital signal to produce a copy protected digital signal; and
an audio/video unit for descrambling the copy protected digital signal to produce a digital signal in the clear and decoding digital signal in the clear, wherein the digital signal in the clear is protected against external access and interception.
36. The receiver of claim 35 , wherein the conditional access module is a Point of Deployment module.
37. The receiver of claim 35 , wherein the audio/video unit comprises an integrated circuit that includes a descrambler engine and a functional block.
38. The receiver of claim 37 , further comprising a link for securely transmitting the copy protected digital signal from the conditional access module to the descrambler engine of the audio/video unit.
39. The receiver of claim 35 , further comprising a front-end unit for receiving the digital signal.
40. The receiver of claim 39 , wherein the digital signal is received from one or more systems consisting of a broadcast system, a satellite system, a cable system, a terrestrial system, and a wireless transmission system.
41. The receiver of claim 39 , wherein the front-end unit comprises a connection to the Internet.
42. The receiver of claim 35 , further comprising a smart card, coupled to the conditional access module, for storing the billing information and a key used for descrambling the digital signal.
43. A receiver comprising:
a smart card for storing a key;
a first descrambling engine, coupled to the smart card, for descrambling a digital media signal using the key;
a scrambler engine, coupled to the descrambling unit, for re-scrambling the descrambled digital media signal for copy protection within the receiver;
an audio/video integrated circuit, coupled to the scrambler engine comprising;
a second descrambler engine for descrambling the copy protected digital media signal; and
a functional block, coupled to the second descrambler engine, for processing the descrambled copy protected digital media signal.
44. The receiver of claim 43 , further comprising a Point of Deployment comprising:
the first descrambling engine; and
the scrambler engine.
45. The receiver of claim 43 , further comprising a front-end unit comprising:
the first descrambling engine;
the scrambler engine; and
a tuner, coupled to the first descrambling engine, for receiving the digital media signal.
46. The receiver of claim 43 , further comprising a link between the scrambler engine and the audio/video integrated circuit for securely transmitting the copy protected digital media signal from the scrambler engine to the second descrambler engine.
47. The receiver of claim 43 , wherein a point for intercepting the digital signal in the clear between the first descrambling engine and the function block in not present.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/398,406 US20060182279A1 (en) | 2000-03-29 | 2006-04-04 | Secure conditional access port interface |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US09/538,568 US7146007B1 (en) | 2000-03-29 | 2000-03-29 | Secure conditional access port interface |
US11/398,406 US20060182279A1 (en) | 2000-03-29 | 2006-04-04 | Secure conditional access port interface |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/538,568 Continuation US7146007B1 (en) | 2000-03-29 | 2000-03-29 | Secure conditional access port interface |
Publications (1)
Publication Number | Publication Date |
---|---|
US20060182279A1 true US20060182279A1 (en) | 2006-08-17 |
Family
ID=24147447
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/538,568 Expired - Fee Related US7146007B1 (en) | 2000-03-29 | 2000-03-29 | Secure conditional access port interface |
US11/398,406 Abandoned US20060182279A1 (en) | 2000-03-29 | 2006-04-04 | Secure conditional access port interface |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/538,568 Expired - Fee Related US7146007B1 (en) | 2000-03-29 | 2000-03-29 | Secure conditional access port interface |
Country Status (3)
Country | Link |
---|---|
US (2) | US7146007B1 (en) |
AU (1) | AU2001250908A1 (en) |
WO (1) | WO2001074071A1 (en) |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20080007898A1 (en) * | 2005-03-25 | 2008-01-10 | Akihiro Tatsuta | Front-end device of set-top box for two-way communication |
US20080285946A1 (en) * | 2005-07-15 | 2008-11-20 | Institut für Rundfunktechnik GmbH | Method and Arrangement for Retransmitting and Processing and/or Displaying and/or Storing of Sound and/or Picture Contents |
US20090059069A1 (en) * | 2003-08-14 | 2009-03-05 | Broadcom Corporation | BTSC pilot signal lock |
Families Citing this family (39)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7730300B2 (en) | 1999-03-30 | 2010-06-01 | Sony Corporation | Method and apparatus for protecting the transfer of data |
US7039614B1 (en) | 1999-11-09 | 2006-05-02 | Sony Corporation | Method for simulcrypting scrambled data to a plurality of conditional access devices |
US7747853B2 (en) | 2001-06-06 | 2010-06-29 | Sony Corporation | IP delivery of secure digital content |
US7895616B2 (en) | 2001-06-06 | 2011-02-22 | Sony Corporation | Reconstitution of program streams split across multiple packet identifiers |
US7139398B2 (en) | 2001-06-06 | 2006-11-21 | Sony Corporation | Time division partial encryption |
EP1440539A4 (en) * | 2001-09-27 | 2009-08-26 | Broadcom Corp | Highly integrated media access control |
US7292690B2 (en) | 2002-01-02 | 2007-11-06 | Sony Corporation | Video scene change detection |
US7823174B2 (en) | 2002-01-02 | 2010-10-26 | Sony Corporation | Macro-block based content replacement by PID mapping |
US7765567B2 (en) | 2002-01-02 | 2010-07-27 | Sony Corporation | Content replacement by PID mapping |
US7215770B2 (en) | 2002-01-02 | 2007-05-08 | Sony Corporation | System and method for partially encrypted multimedia stream |
US7302059B2 (en) | 2002-01-02 | 2007-11-27 | Sony Corporation | Star pattern partial encryption |
US7155012B2 (en) | 2002-01-02 | 2006-12-26 | Sony Corporation | Slice mask and moat pattern partial encryption |
US20040078584A1 (en) * | 2002-08-23 | 2004-04-22 | General Instrument Corp. | Interchip transport bus copy protection |
US8818896B2 (en) | 2002-09-09 | 2014-08-26 | Sony Corporation | Selective encryption with coverage encryption |
US8572408B2 (en) | 2002-11-05 | 2013-10-29 | Sony Corporation | Digital rights management of a digital device |
US7724907B2 (en) | 2002-11-05 | 2010-05-25 | Sony Corporation | Mechanism for protecting the transfer of digital content |
US8667525B2 (en) | 2002-12-13 | 2014-03-04 | Sony Corporation | Targeted advertisement selection from a digital stream |
US8645988B2 (en) | 2002-12-13 | 2014-02-04 | Sony Corporation | Content personalization for digital content |
KR20050092710A (en) * | 2002-12-18 | 2005-09-22 | 코닌클리즈케 필립스 일렉트로닉스 엔.브이. | Dedicated encrypted virtual channel in a multi-channel serial communications interface |
JP2004214971A (en) * | 2002-12-27 | 2004-07-29 | Sharp Corp | Av data transmitter, av data receiver, and av data radio communication system |
EP1467565A1 (en) | 2003-04-07 | 2004-10-13 | STMicroelectronics Limited | Integrated circuit for decryption of broadcast signals |
US20040230997A1 (en) * | 2003-05-13 | 2004-11-18 | Broadcom Corporation | Single-chip cable set-top box |
CA2759064C (en) * | 2003-05-23 | 2017-04-04 | Washington University | Intellegent data storage and processing using fpga devices |
US7557862B2 (en) * | 2003-08-14 | 2009-07-07 | Broadcom Corporation | Integrated circuit BTSC encoder |
US7286667B1 (en) | 2003-09-15 | 2007-10-23 | Sony Corporation | Decryption system |
US7853980B2 (en) | 2003-10-31 | 2010-12-14 | Sony Corporation | Bi-directional indices for trick mode video-on-demand |
US7568111B2 (en) * | 2003-11-11 | 2009-07-28 | Nokia Corporation | System and method for using DRM to control conditional access to DVB content |
US8578434B2 (en) | 2004-05-21 | 2013-11-05 | Broadcom Corporation | Integrated cable modem |
US8732788B2 (en) * | 2004-05-21 | 2014-05-20 | Broadcom Corporation | Integrated set-top box |
US8239914B2 (en) | 2004-07-22 | 2012-08-07 | Broadcom Corporation | Highly integrated single chip set-top box |
US8041190B2 (en) | 2004-12-15 | 2011-10-18 | Sony Corporation | System and method for the creation, synchronization and delivery of alternate content |
US7895617B2 (en) | 2004-12-15 | 2011-02-22 | Sony Corporation | Content substitution editor |
KR101087102B1 (en) * | 2005-02-01 | 2011-11-25 | 엘지전자 주식회사 | Program information method of digital broadcasting receiver |
US8185921B2 (en) | 2006-02-28 | 2012-05-22 | Sony Corporation | Parental control of displayed content using closed captioning |
US20070294738A1 (en) * | 2006-06-16 | 2007-12-20 | Broadcom Corporation | Single chip cable set-top box supporting DOCSIS set-top Gateway (DSG) protocol and high definition advanced video codec (HD AVC) decode |
US7921046B2 (en) | 2006-06-19 | 2011-04-05 | Exegy Incorporated | High speed processing of financial information using FPGA devices |
US8590028B2 (en) | 2007-07-09 | 2013-11-19 | Infosys Limited | Content licensing and conditional access using a mobile device |
WO2009029842A1 (en) | 2007-08-31 | 2009-03-05 | Exegy Incorporated | Method and apparatus for hardware-accelerated encryption/decryption |
US20090316892A1 (en) * | 2008-06-20 | 2009-12-24 | Candelore Brant L | Crypto micro-module using IEEE 1394 for stream descrambling |
Citations (36)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4731839A (en) * | 1985-01-09 | 1988-03-15 | Radio-Television Beige de la Communaute Francaise | Method for coding and de-coding audio and video information |
US4736422A (en) * | 1983-06-30 | 1988-04-05 | Independent Broadcasting Authority | Encrypted broadcast television system |
US5485221A (en) * | 1993-06-07 | 1996-01-16 | Scientific-Atlanta, Inc. | Subscription television system and terminal for enabling simultaneous display of multiple services |
US5684876A (en) * | 1995-11-15 | 1997-11-04 | Scientific-Atlanta, Inc. | Apparatus and method for cipher stealing when encrypting MPEG transport packets |
US5774548A (en) * | 1995-09-05 | 1998-06-30 | Hitachi, Ltd. | Digital broadcast transmitting and receiving system and transmitting and receiving apparatus thereof |
US5787171A (en) * | 1994-06-28 | 1998-07-28 | Sony Corporation | Data transmitter and receiver |
US5825879A (en) * | 1996-09-30 | 1998-10-20 | Intel Corporation | System and method for copy-protecting distributed video content |
US5828419A (en) * | 1996-02-29 | 1998-10-27 | Hughes Electronics | Method and apparatus for generating television program guides utilizing icons |
US5828416A (en) * | 1996-03-29 | 1998-10-27 | Matsushita Electric Corporation Of America | System and method for interfacing a transport decoder to a elementary stream video decorder |
US5850218A (en) * | 1997-02-19 | 1998-12-15 | Time Warner Entertainment Company L.P. | Inter-active program guide with default selection control |
US5862216A (en) * | 1997-04-03 | 1999-01-19 | Resco Metal & Plastics Products Corp. | Telephone lock guard |
US5883621A (en) * | 1996-06-21 | 1999-03-16 | Sony Corporation | Device control with topology map in a digital network |
US5892910A (en) * | 1995-02-28 | 1999-04-06 | General Instrument Corporation | CATV communication system for changing first protocol syntax processor which processes data of first format to second protocol syntax processor processes data of second format |
US5901339A (en) * | 1992-10-27 | 1999-05-04 | Mitsubishi Corporation | Pay broadcasting system |
US5930361A (en) * | 1996-12-31 | 1999-07-27 | Time Warner Cable, A Division Of Time Warner Entertainment Company, L.P. | Video inversion detection apparatus and method |
US5960445A (en) * | 1996-04-24 | 1999-09-28 | Sony Corporation | Information processor, method of updating a program and information processing system |
US6021199A (en) * | 1996-11-14 | 2000-02-01 | Kabushiki Kaisha Toshiba | Motion picture data encrypting method and computer system and motion picture data encoding/decoding apparatus to which encrypting method is applied |
US6025837A (en) * | 1996-03-29 | 2000-02-15 | Micrsoft Corporation | Electronic program guide with hyperlinks to target resources |
US6040851A (en) * | 1998-01-20 | 2000-03-21 | Conexant Systems, Inc. | Small-format subsystem for broadband communication services |
US6144402A (en) * | 1997-07-08 | 2000-11-07 | Microtune, Inc. | Internet transaction acceleration |
US6154206A (en) * | 1998-05-06 | 2000-11-28 | Sony Corporation Of Japan | Method and apparatus for distributed conditional access control on a serial communication network |
US6160570A (en) * | 1998-04-20 | 2000-12-12 | U.S. Philips Corporation | Digital television system which selects images for display in a video sequence |
US6185735B1 (en) * | 1996-07-17 | 2001-02-06 | U.S. Philips Corporation | Method of operating an apparatus intended to permit access to services |
US6286103B1 (en) * | 1998-10-02 | 2001-09-04 | Canal+Societe Anonyme | Method and apparatus for encrypted data stream transmission |
US6317885B1 (en) * | 1997-06-26 | 2001-11-13 | Microsoft Corporation | Interactive entertainment and information system using television set-top box |
US6326947B1 (en) * | 1999-03-02 | 2001-12-04 | Microsoft Corporation | Tactile character input in computer-based devices |
US6374404B1 (en) * | 1998-12-16 | 2002-04-16 | Sony Corporation Of Japan | Intelligent device having background caching of web pages from a digital television broadcast signal and method of same |
US6407998B1 (en) * | 1997-10-02 | 2002-06-18 | Thomson Licensing S.A. | Multimedia decoder for prioritized bi-directional communication in a broadcast system |
US6567982B1 (en) * | 1995-04-25 | 2003-05-20 | Bellsouth Intellectual Property Corporation | System and method for providing television services |
US6601238B2 (en) * | 1998-12-22 | 2003-07-29 | Thomson Licensing S.A. | Providing a link to programs in a program guide |
US6628891B1 (en) * | 1999-11-19 | 2003-09-30 | Scm Microsystems, Inc. | Signal filtering mechanism for a multi-purpose digital television receiver |
US6751321B1 (en) * | 1997-04-24 | 2004-06-15 | Kabushiki Kaisha Toshiba | Digital data reproduction device |
US6757909B1 (en) * | 1999-12-29 | 2004-06-29 | Sony Corporation | Internet set-top box having an in-band tuner and cable modem |
US20040151314A1 (en) * | 1999-03-30 | 2004-08-05 | Candelore Brant L. | Method and apparatus for securing control words |
US6818935B2 (en) * | 2001-09-12 | 2004-11-16 | Hynix Semiconductor Inc. | Semiconductor device and method for fabricating the same |
US7596692B2 (en) * | 2002-06-05 | 2009-09-29 | Microsoft Corporation | Cryptographic audit |
Family Cites Families (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5862219A (en) | 1995-05-12 | 1999-01-19 | General Instrument Corporation | Cable television setback decoder automatic control |
US5818935A (en) | 1997-03-10 | 1998-10-06 | Maa; Chia-Yiu | Internet enhanced video system |
US6898800B2 (en) | 1999-03-31 | 2005-05-24 | Sedna Patent Services, Llc | Method and apparatus providing process independence within a heterogeneous information distribution system |
-
2000
- 2000-03-29 US US09/538,568 patent/US7146007B1/en not_active Expired - Fee Related
-
2001
- 2001-03-21 WO PCT/US2001/009026 patent/WO2001074071A1/en active Application Filing
- 2001-03-21 AU AU2001250908A patent/AU2001250908A1/en not_active Abandoned
-
2006
- 2006-04-04 US US11/398,406 patent/US20060182279A1/en not_active Abandoned
Patent Citations (37)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4736422A (en) * | 1983-06-30 | 1988-04-05 | Independent Broadcasting Authority | Encrypted broadcast television system |
US4731839A (en) * | 1985-01-09 | 1988-03-15 | Radio-Television Beige de la Communaute Francaise | Method for coding and de-coding audio and video information |
US5901339A (en) * | 1992-10-27 | 1999-05-04 | Mitsubishi Corporation | Pay broadcasting system |
US5485221A (en) * | 1993-06-07 | 1996-01-16 | Scientific-Atlanta, Inc. | Subscription television system and terminal for enabling simultaneous display of multiple services |
US5787171A (en) * | 1994-06-28 | 1998-07-28 | Sony Corporation | Data transmitter and receiver |
US5892910A (en) * | 1995-02-28 | 1999-04-06 | General Instrument Corporation | CATV communication system for changing first protocol syntax processor which processes data of first format to second protocol syntax processor processes data of second format |
US6567982B1 (en) * | 1995-04-25 | 2003-05-20 | Bellsouth Intellectual Property Corporation | System and method for providing television services |
US5774548A (en) * | 1995-09-05 | 1998-06-30 | Hitachi, Ltd. | Digital broadcast transmitting and receiving system and transmitting and receiving apparatus thereof |
US5684876A (en) * | 1995-11-15 | 1997-11-04 | Scientific-Atlanta, Inc. | Apparatus and method for cipher stealing when encrypting MPEG transport packets |
US5828419A (en) * | 1996-02-29 | 1998-10-27 | Hughes Electronics | Method and apparatus for generating television program guides utilizing icons |
US5828416A (en) * | 1996-03-29 | 1998-10-27 | Matsushita Electric Corporation Of America | System and method for interfacing a transport decoder to a elementary stream video decorder |
US6025837A (en) * | 1996-03-29 | 2000-02-15 | Micrsoft Corporation | Electronic program guide with hyperlinks to target resources |
US5960445A (en) * | 1996-04-24 | 1999-09-28 | Sony Corporation | Information processor, method of updating a program and information processing system |
US5883621A (en) * | 1996-06-21 | 1999-03-16 | Sony Corporation | Device control with topology map in a digital network |
US6185735B1 (en) * | 1996-07-17 | 2001-02-06 | U.S. Philips Corporation | Method of operating an apparatus intended to permit access to services |
US5825879A (en) * | 1996-09-30 | 1998-10-20 | Intel Corporation | System and method for copy-protecting distributed video content |
US6021199A (en) * | 1996-11-14 | 2000-02-01 | Kabushiki Kaisha Toshiba | Motion picture data encrypting method and computer system and motion picture data encoding/decoding apparatus to which encrypting method is applied |
US5930361A (en) * | 1996-12-31 | 1999-07-27 | Time Warner Cable, A Division Of Time Warner Entertainment Company, L.P. | Video inversion detection apparatus and method |
US6493876B1 (en) * | 1997-02-19 | 2002-12-10 | Time Warner Entertainment Company, L.P. | System and method for providing a full service television system |
US5850218A (en) * | 1997-02-19 | 1998-12-15 | Time Warner Entertainment Company L.P. | Inter-active program guide with default selection control |
US5862216A (en) * | 1997-04-03 | 1999-01-19 | Resco Metal & Plastics Products Corp. | Telephone lock guard |
US6751321B1 (en) * | 1997-04-24 | 2004-06-15 | Kabushiki Kaisha Toshiba | Digital data reproduction device |
US6317885B1 (en) * | 1997-06-26 | 2001-11-13 | Microsoft Corporation | Interactive entertainment and information system using television set-top box |
US6144402A (en) * | 1997-07-08 | 2000-11-07 | Microtune, Inc. | Internet transaction acceleration |
US6407998B1 (en) * | 1997-10-02 | 2002-06-18 | Thomson Licensing S.A. | Multimedia decoder for prioritized bi-directional communication in a broadcast system |
US6040851A (en) * | 1998-01-20 | 2000-03-21 | Conexant Systems, Inc. | Small-format subsystem for broadband communication services |
US6160570A (en) * | 1998-04-20 | 2000-12-12 | U.S. Philips Corporation | Digital television system which selects images for display in a video sequence |
US6154206A (en) * | 1998-05-06 | 2000-11-28 | Sony Corporation Of Japan | Method and apparatus for distributed conditional access control on a serial communication network |
US6286103B1 (en) * | 1998-10-02 | 2001-09-04 | Canal+Societe Anonyme | Method and apparatus for encrypted data stream transmission |
US6374404B1 (en) * | 1998-12-16 | 2002-04-16 | Sony Corporation Of Japan | Intelligent device having background caching of web pages from a digital television broadcast signal and method of same |
US6601238B2 (en) * | 1998-12-22 | 2003-07-29 | Thomson Licensing S.A. | Providing a link to programs in a program guide |
US6326947B1 (en) * | 1999-03-02 | 2001-12-04 | Microsoft Corporation | Tactile character input in computer-based devices |
US20040151314A1 (en) * | 1999-03-30 | 2004-08-05 | Candelore Brant L. | Method and apparatus for securing control words |
US6628891B1 (en) * | 1999-11-19 | 2003-09-30 | Scm Microsystems, Inc. | Signal filtering mechanism for a multi-purpose digital television receiver |
US6757909B1 (en) * | 1999-12-29 | 2004-06-29 | Sony Corporation | Internet set-top box having an in-band tuner and cable modem |
US6818935B2 (en) * | 2001-09-12 | 2004-11-16 | Hynix Semiconductor Inc. | Semiconductor device and method for fabricating the same |
US7596692B2 (en) * | 2002-06-05 | 2009-09-29 | Microsoft Corporation | Cryptographic audit |
Cited By (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20090059069A1 (en) * | 2003-08-14 | 2009-03-05 | Broadcom Corporation | BTSC pilot signal lock |
US7750975B2 (en) * | 2003-08-14 | 2010-07-06 | Broadcom Corporation | BTSC pilot signal lock |
US20080007898A1 (en) * | 2005-03-25 | 2008-01-10 | Akihiro Tatsuta | Front-end device of set-top box for two-way communication |
US7757263B2 (en) * | 2005-03-25 | 2010-07-13 | Panasonic Corporation | Front-end device of set-top box for two-way communication |
US20080285946A1 (en) * | 2005-07-15 | 2008-11-20 | Institut für Rundfunktechnik GmbH | Method and Arrangement for Retransmitting and Processing and/or Displaying and/or Storing of Sound and/or Picture Contents |
US9077953B2 (en) | 2005-07-15 | 2015-07-07 | Institut Fuer Rundfunktechnik Gmbh | Method and arrangement for retransmitting as well as processing and/or displaying and/or storing of sound and/or picture contents, and device for processing and/or displaying and/or storing of sound and/or picture contents |
Also Published As
Publication number | Publication date |
---|---|
AU2001250908A1 (en) | 2001-10-08 |
US7146007B1 (en) | 2006-12-05 |
WO2001074071A1 (en) | 2001-10-04 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7146007B1 (en) | Secure conditional access port interface | |
US6757909B1 (en) | Internet set-top box having an in-band tuner and cable modem | |
JP5022029B2 (en) | Content scrambling with minimal impact on legacy devices | |
US9467658B2 (en) | Method and apparatus for protecting the transfer of data | |
KR100600484B1 (en) | Communication network and method | |
US20060133610A1 (en) | Method and system for a secure high bandwidth bus in a transceiver device | |
US20030174844A1 (en) | Method and apparatus for protecting the transfer of data | |
WO2001022724A1 (en) | Multimedia digital terminal and detachable module cooperating with the terminal comprising an interface protected against copying | |
JP2008541618A (en) | Method and apparatus for high speed digital cable tuning by caching access information | |
KR101578131B1 (en) | System apparatus and method for conditional broadcast reception without cablecard | |
WO2001074003A1 (en) | Transceiver system and method | |
CA2393946A1 (en) | A method and system for a bi-directional transceiver | |
WO2001074075A1 (en) | Removable smart card interface for set top box | |
KR20070027135A (en) | Multi-descrambeler system and method in digital broadcasting receiver | |
JP2005217918A (en) | Receiving system | |
KR20050021696A (en) | Conditional access device for digital set top box and broadcast signalling receiving method using thereof |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |