Thomson Licensing

Thomson Licensing S.a.

Interdigital Ce Patent Holdings

Alain Durand

Eric Diehl

Jean-Pierre Andreaux

Olivier Heen

Mohamed Karroumi

Sylvain Lelievre

Jean-Louis Diascorn

Christophe Laurent

Stéphane Onno

Yan-Mei Tang-Talpin

Michel Morvan

Thomas Sirvent

Gilles Straub

Marc Joye

Yves Maetz

Charles Salmon-Legagneur

Jean-Baptiste Henry

Olivier Courtay

Stephane Onno

Christophe Vincent

Antoine Monsifrot

Frederic Lefebvre

Laurent Lesenne

Nicolas Prigent

Ralf Schaefer

Frédéric Pasquier

Louis-Xavier Carbonnel

Frédéric Lefebvre

Ayoub Massoudi

Fabien Battini

Sylvain Lelièvre

Yan-Mei Tang Talpin

Oliver Courtay

Jean Pierre Andreaux

A device comprising a hardware processor and memory storing an application of an application package comprising a first version and a second version of the application, the first version being intended to be executed on a genuine device and the second version on a jailbroken device. The hardware processor determines a jailbreak status of the device, i.e. genuine or jailbroken and derives a key based on at least the jailbreak status. In case the device is genuine, the hardware processor deciphers using the key at least a first part of the first version and executes, the first version using the first deciphered part, for example a jump table used to execute CFG flattened code. In case the jailbreak status is jailbroken, the hardware processor deciphers using the key at least a first part of the second version and executes the second version using the second deciphered part, for example comprising executable instructions.

Device and method for executing protected iOS software modules

The processing device is intended to be connected to a network of the second domain so as to receive data encrypted according to an encryption method specific to the first domain. It comprises: The invention also relates to the method for transmitting data encrypted with the aid of the secret specific to the first domain in the network of the second domain.

Device for processing and method for transmission of encoded data for a first domain in a network pertaining to a second domain

A method for distributing content in a content distribution system is disclosed which comprises the steps of: encrypting at a Content Packager a content using a content encryption key to generate an encrypted content; sending the content encryption key to a Licensing Authority; receiving from the Licensing Authority a distribution key containing an encryption of the content decryption key (K) for a given set of authorized devices; creating a secure link between the content encryption key (K) and the content protected by this content encryption key using a signature of the content; and distributing the encrypted content together with the signature of the content. A method for receiving content distributed according to the above-mentioned method in a device able to play back the content is also disclosed where the content signature is checked before any play back of the content.

Method for preventing laundering and repackaging of multimedia content in content distribution systems

A method of processing digital content according to a workflow. The digital content is received and information for the workflow is checked to decide if a processing device is authorized to process the content, the workflow imposing that the digital content be processed in a process chain comprising at least two nodes, wherein the processing device is authorized to process the content if it corresponds to the node that according to the process chain is the next node to process the digital content. If the processing device is authorized to process the content, the digital content is processed and the information for the workflow is updated. Also provided is a system.

Method and system digital for processing digital content according to a workflow

The invention relates to a local digital network comprising: The source device uses a network active encryption key to encrypt data liable to be broadcast in the network and the receiver device contains: The invention also relates to the installing of new devices in such a network as well as the sending of data from a source device to a receiver device.

Local digital network, methods for installing new devices and data broadcast and reception methods in such a network

Delivery of conditional access data to a receiver that is able to connect to a plurality of scrambled programs. Conditional access for a current channel is handled using standard ECMs delivered with the channel. In parallel, the receiver retrieves an ECM for a separate stream comprising control words for every channel. The control word of this ECM is used to descramble the separate stream to access the control words for every channel. In a preferred embodiment, these control words are super-encrypted using channel keys and the receiver is only able to obtain channel keys for channels for which it has access rights. In case the control words are super-encrypted, they are decrypted. Upon channel change, the relevant retrieved control word is used to descramble the new channel. Also provided is a receiver device and a transmitter device. According to a variant, the control words received in the separate stream is treated only upon a change of channel. The invention enables a reduction or removal of the CA delay when switching between channels.

Method and device for reception of control words, and device for transmission thereof

A method for discovering emulated clients. A verifier sends a cryptographic challenge C to a client and preferably starts a timer. The client uses a deterministic key search algorithm to find the correct key and returns the result as a number of tries needed. The verifier then stops the timer if this was started and verifies that the result is correct and preferably that the response was timely. Also provided is a verifier.

Device and method using non-cycle accurate measurements for discovering emulated clients

A method for checking a validity of a certificate (600) containing a key associated to a network device (601) in a network, comprises receiving at the network an encrypted content (611) and a validity index (630) associated to the content. The validity of the certificate is evaluated from a time index (606) contained within the certificate, the time index having a value corresponding to a time of issue of the certificate, and from the validity index associated to the encrypted content.

Certificate validity checking

The number of devices installed in an Authorized Domain is controlled by a master device functionality. This master devices stores ceiling values for the total number Totaljimit of devices to be installed in the AD; the total number Localjimit of devices to be installed in a local proximity with the master device and the total number Remotejimit of devices to be installed remotely from said master device. The master device also stores current values of the number Local_count of devices installed in the AD in local proximity with the master device; and the number Remote_count of devices installed in the AD remotely from said master device. When a new device is to be installed in the AD, the ceiling values are checked with respect to the current values and it is checked whether the device is in local proximity with the master device to authorize or not its installation in the AD, either locally or remotely.

Method and apparatus for controlling the number of devices installed in an authorized domain

The invention relates to a method of receiving and securely recording digital data comprising a step for recording said digital data on a secured disk by a recorder/receiver belonging to a determined secured domain comprising several equipment items and defined by an identifier, a step for recording on the secured disk the identifier of the domain of the recorder/receiver to define this domain as the only domain in which the reproduction/copying of the multimedia content is authorized, wherein it comprises a prior step for recovering a disk key from the secured disk, and in that the domain identifier is encrypted by said disk key and the digital data is scrambled by title keys, said title keys being encrypted by said disk key. The invention also relates to a method of securely distributing digital data, an access device and a recorder/receiver.

Method for etching and secure distribution of digital data, access device and writer

The invention relates to a method for controlling digital rights of the 'Play N times' type for a digital audio and/or video content, referred to as controlled content, the controlled content being consumed by a consumer on a consuming device or on another device delegating the controlling of these rights to the consuming device. According to this method, charging of one additional usage is inhibited in at least one of the following cases where:

Method for controlling digital rights of the 'Play N times' type for a digital audio and/or video content and device implementing this method

A system for protection against unauthorized modifications of digital content, in particular image content, in which a content processing system retrieves content, a fingerprint for the content and at least one modification limit expressing authorized modifications to the content. The content may then be modified, but before saving or exportation is allowed, a second fingerprint is calculated, and the difference between the fingerprints is compared with the at least one modification limit. If the difference is within the allowed bounds, then saving or exportation is allowed; if not, it is prevented. Also provided are a method and a content consumer device performing essentially the same steps before allowing rendering of the content.

Method and devices for video processing rights enforcement

The invention concerns a method implemented in a communication network comprising a source device including: a first symmetrical key for encrypting data to be transmitted to a display device connected to the network; and the first symmetrical key encrypted with a second symmetrical network key known only to at least one display device connected to the network. When the source device needs to renew its first symmetrical key to encrypt new data, it generates a random number, then it calculates a new symmetrical key based on the first symmetrical key and on the random number. It then encrypts the data to be transmitted with the new symmetrical key and transmits to a display device, via the network: the data encrypted with the new symmetrical key, the random number, and the first encrypted symmetrical key with the second symmetrical network key.

Simplified method for renewing symmetrical keys in a digital network

Device and method for calculating distance in a communication network. Device A sets a non-predictable initial Time-To-Live (TTL) value and sends a message with this value to device B. B reads the TTL of the received message. A and B establish a Secure Authenticated Channel over which B sends the TTL of the received message. A may then calculate the distance to B. If the received TTL is greater than the initial TTL, this indicates an error or an attack; if the received TTL is lower than the initial TTL minus a TTL limit, then B is too distant; and if the initial TTL minus the TTL limit is less than or equal to the received TTL, which in turn is less than or equal to the initial TTL, then A may conclude that B a priori is within the required distance.

Methods and a device for secure distance calculation in communication networks

A method for service delivery to a client, in which the client selects a service, and establishes a connection with a system server to which it sends an identity associated with the client and an identifier of the service. The system server verifies that the client is authorized to access to the service and that the client is non-emulated. If this is verified, the service is provided to the client. In a preferred embodiment, the service is scrambled content and the system server provides a descrambling key to the client, and instructs a content server to provide the scrambled content to the client. Also claimed are a device, a system, and a system server.

Growing community of inventors

Rennes, France

Alain Durand