Secure negotiation and encryption module

inn iiiiiii Hi mi mi Iiiii jiii|iii jiiijii mi win mi mi mi

(12;

United States Patent

Sedacca

(io) Patent No.: (45) Date of Patent:

US 7,519,999 B2 Apr. 14, 2009

(54) SECURE NEGOTIATION AND ENCRYPTION MODULE

(75) Inventor: David A. Sedacca, Atlanta, GA (US)

(73) Assignee: Scientific-Atlanta, Inc., Lawrenceville, GA(US)

( * ) Notice: Subject to any disclaimer, the term of this patent is extended or adjusted under 35 U.S.C. 154(b) by 1155 days.

(21) Appl.No.: 10/789,337

(22) Filed: Feb. 27, 2004

(65) Prior Publication Data

US 2005/0190916 Al Sep. 1, 2005

(51) Int. CI.

G06F 7/04 (2006.01)
H04K1/00 (2006.01)
H04N 7/16 (2006.01)

(52) U.S. CI 726/26; 380/284

(58) Field of Classification Search 726/26;

380/284

See application file for complete search history.

(56) References Cited

U.S. PATENT DOCUMENTS

5,742,677 A 4/1998 Pinder

5,870,474 A 2/1999 Wasilewski

5,937,067 A * 8/1999 Thatcher et al 380/212

6,005,938 A 12/1999 Banker

6,105,134 A 8/2000 Pinder

6,157,719 A * 12/2000 Wasilewski et al 380/210

6,223,285 Bl * 4/2001 Komuroetal 713/160

6,246,767 Bl 6/2001 Akins

6,252,964 Bl 6/2001 Wasilewski

6,292,568 Bl 9/2001 Akins

6,424,714 Bl 7/2002 Wasilewski

6,424,717 Bl 7/2002 Pinder

A digital subscriber communication terminal includes an adaptive output interface having a device key set, which, along with a subscriber device coupled to the adaptive output interface, determines a "shared secret." The adaptive output interface uses the "shared secret" to encrypt content and transmits the content to the subscriber device coupled to the adaptive output interface. The digital subscriber communications terminal includes a processor, a memory having an encrypted device key set and an encrypted device key set decryptor stored therein and a secure element having a key decryptor. The secure element is adapted to receive the encrypted device key set decryptor and use the key decryptor to decrypt the encrypted device key set decryptor. The device key set decryptor is provided to the processor, which decrypts the encrypted device key set using the device key set decryptor, and the device key set is loaded into the adaptive output interface.

U.S. PATENT DOCUMENTS

6,510,519 B2 1/2003 Wasilewski

6,516,412 B2 2/2003 Wasilewski

6,526,508 B2 2/2003 Akins

6,560,340 Bl 5/2003 Akins

6,744,892 B2 6/2004 Akins

6,937,729 B2 8/2005 Akins

6,971,008 B2 11/2005 Wasilewski

6,996,238 B2 * 2/2006 Candelore 380/278

7,184,550 B2* 2/2007 Graunke 380/42

7,296,295 B2 * 11/2007 Kellerman et al 726/26

2002/0002706 Al * 1/2002 Sprank 725/29

FOREIGN PATENT DOCUMENTS WO WO 02/052778 7/2002

OTHER PUBLICATIONS

Andreaux et al., Copy Protection System for Digital Home Networks, Mar. 2004, IEEE Signal Processing Magazine, pp. 100-109 * Eskicioglu et al., Security of digital entertainment content rom creation to consumption, 2003, Singal Processing: Image Communication, Elsevier, pp. 237-262.*

Eskicioglu, Protecting Intellectual Property in Digital Multimedia Networks, Jul. 2003, IEEE, pp. 39-45.*

Ripley et al., Content Protection in the Digital Home, Nov. 2002, Intel Technology Journal, pp. 49-56.*

U.S. Appl. No. 09/111,958, filed Jul. 8, 1998, entitled "Mechanism

and Apparatus for Encapsulation of Entitlement Authorization in

Conditional Access System," Inventor: Defreese.

U.S. Appl. No. 11/464,421, filed Jun. 16, 2006, entitled "Securing

Media Content Using Interchangeable Encryption Key," Inventor:

Pinder.

U.S. Appl. No. 10/981,347, filed Mar. 25,2003, entitled "Mechanism

and Apparatus for Encapsulation of Entitlement Authorization in a

Conditional Access System," Inventor: Defreese.

U.S. Appl. No. 11/428,367, filed Jun. 30, 2006, entitled "Secure

Escrow and Recovery of Media Device Content Keys," Inventor:

Schlarb.

U.S. Appl. No. 11/861,328, filed Sep. 28, 2007, entitled "Controlled Cryptoperiod Timing to Reduce Decoder Processing Load," Inventor: Pinder.

U.S. Appl. No. 11/781,412, filed Jul. 23, 2007, entitled "Preventing Unauthorized Poaching of Set Lop Box Assets," Inventor: Murray. U.S. Appl. No. 11/671,506, filed Feb. 6,2007, entitled "Apparatus for Entitling and Lransmitting Service Instances to Remote Client Devices," Inventor: Russ.

U.S. Appl. No. 11/829,674, filed Jul. 27, 2007, entitled "Secure Content Key Distribution Using Multiple Distinct Methods," Inventor: Pinder.

* cited by examiner