General Instrument Corporation

Bridget Diane Kimball

Eric J Sprunk

Lawrence W Tang

Douglas M Petty

John I Okimoto

Michael T Habrat

Xin Qiu

Robert Owen Eifrig

Paul Douglas Baker

Annie On-yee Chen

Walter H Anderes

Annie O Chen

The present invention discloses an apparatus and method for defining and enforcing rules of transition between two security domains, e.g., a transport domain and a persistent security domain. In turn, a border guard, e.g., a security device, is provided between these two domains that enforce rules for transition between the two security domains. This novel approach of defining a transport domain and a persistent security domain simplifies the classification of the digital content and its movement through the system. Namely, the border guard once established between the two systems can enforce DRM rules associated with how contents are moved between the two domains.

Method and apparatus for providing a border guard between security domains

The present invention discloses a system and method for providing a secured system time reference to a subscriber device, e.g., a set top box or a receiver. In one embodiment, the system time reference is provided in a secure system time message that is broadcasted to a plurality of subscriber devices. Each subscriber device has a security device or software application that is capable of determining whether the received system time reference is legitimate. If the system time reference is determined to be legitimate, a local time reference is synchronized with said received system time reference.

Method and apparatus for providing a secure system time

A display device with personal versatile recorder capabilities is provided which is capable of processing progressive I-slice refreshed MPEG data streams to enable trick play mode features. The display device comprises a receiver for receiving a progressive I-slice refreshed MPEG data stream having I-slices distributed over multiple P-frames. The display device further comprises a syntax parser for parsing the data stream to locate I-slices which make up an I-frame. A storage device is provided for storing the data stream. The display device also comprises an interface for receiving a command for a trick play mode feature. A processor associated with the syntax parser recovers the located I-slices from the storage device and assembles the recovered I-slices into one or more constructed I-frames. A decoder is provided for decoding the constructed I-frames to enable the trick play mode features.

Methods and apparatus for processing progressive I-slice refreshed MPEG data streams to enable trick play mode features on a display device

According to one embodiment of the invention a system is utilized to leverage the security arrangement between a first and second device to establish a secure link between the first device and a third device. One embodiment of the invention is particularly suitable for loading security data on a set top box, such as that utilized in the cable television industry.

Method to leverage a secure device to grant trust and identity to a second device

A system is described for uniquely mating components of a communication network such as a smartcard and a set-top box. When mated, the smartcard and set-top box are tied together and have a single identity. Further, the smartcard operates properly only when inserted into an authorized set-top box. Exchanges of information between both components are secured by encryption and authentication to guard against piracy of the exchanged information. The system provides the same authentication key to the set-top box and the smartcard. This key is used for authenticating communication between the set-top box and the smartcard. First, the authentication key is encrypted by a set-top box mating key. The set-top box employs this mating key to decrypt the authentication key. After it is derived, the authentication key is stored in the set-top box's memory. Further, the same authentication key is encrypted by a smartcard mating key. Thereafter, the smartcard employs the smartcard mating key to extract the authentication key. The clear authentication key is stored in the smartcard's memory as well. In this manner, the authentication key is used for securing all communication between the set-top box and the smart-card. For example, the set-top box may request control words from the smartcard. Only after authenticating the request, are the control words for decrypting digital content provided to the set-top box. If the smartcard authentication key is different from the set-top box key, the request for control words is denied.

Growing community of inventors

Encinitas, CA, United States of America

Bridget Diane Kimball