Nagravision S.a.

Nagracard S.a.

Christophe Nicolas

Corinne Le Buhan

Joel Conus

André Kudelski

Marco Sasselli

Olivier Brique

Joel Wenger

Michael John Hill

Nicolas Fischer

Andre Kudelski

Joël M Conus

Alexander Main

A utility meter and method for metering consumption of at least one utility including: a metering unit, a communication unit for sending/receiving messages to/from a management center, a memory to store a unique identifier pertaining to the utility meter and a first key, an encryption unit for encrypting the utility consumption as a first cryptogram, a message generator for generating a utility message containing the first cryptogram, a key generator for generating a payload key to be used by the encryption unit for encrypting the utility consumption, a second cryptogram generated by the encryption unit by encrypting the payload key with the first key, the second cryptogram being intended to be included, by the message generator, at least once into the utility message to be sent to the remote management center.

Utility meter for metering a utility consumption and optimizing upstream communications and method for managing these communications

A secure detachable utility monitoring device is disclosed, to be appended to a utility metering apparatus for controlling at least one utility usage consumption. A detachable metering monitoring device of at least one embodiment includes: a usage reading interface to acquire a utility consumption value metered by the utility meter; a first memory to store at least a unique identifier ID and a personal key, both pertaining to the device; a crypto processor to generate a cryptogram from information data comprising at least the utility consumption value, the cryptogram being encrypted with the personal key; a message generator to generate an information message including at least the cryptogram and the unique identifier ID; and a communication network interface including a sending unit to send the information message to a remote management center.

System and method to record encrypted content with access conditions

The present invention aims to address the issue of deploying costly hardware by proposing a content protection layer with an easy distribution capability to clients. The aim is achieved by an network device for descrambling an access controlled audio/video content stream, said network device being configured to be connected to a network router comprises a memory to store a unique address UA specific to the network device, an network input/output interface, a descrambler to descramble the audio/video content stream, and a watermark engine configured to watermark the descrambled audio/video content stream by applying the unique address. A further object of the invention is a method to access scrambled audio/video content stream in a local or roaming mode by a multimedia reception device connected via an IP network to a network router having an IP port connected to the network device.

Ethernet decoder device and method to access protected content

Example embodiments relate to a system to prevent manipulation of transmitted video data including an Integrated Receiver Decoder (IRD) receiving audio/video data and a display device. The IRD may include a device to transmit an HDMI compliant audio/video stream toward the display device. The system may further include a device to add an over-encryption layer to the HDMI/HDCP stream before reaching the display device and a device to remove the added encryption layer so as to recover the HDMI/HDCP stream, before processing the HDMI/HDCP stream by the display device.

System and method to prevent manipulation of transmitted video data

The present invention relates to a system, and method for enforcing utility usage and metering functions by a utility meter associated with a utility consumer end user, connected to a remote utility management center by a communication network. The present invention proposes a utility meter for controlling and metering a least one utility consumption.

System and method to enforce utility meter security

A system and method give a user control of personal data. A trusted center comprises a database for personal data, access conditions for the personal data, and a counter. A user loads personal data into the database and assigns access conditions to said data. The personal data is divided into at least two categories, each associated with a user's value. A third party requests access to personal data of a plurality of users, the request comprising search criteria. The trusted center identifies a first set of users matching the search criteria and returns the quantity of users in, and a sum of user's values for, the first set. The third party acknowledges all or part of the sum, and the trusted center returns the personal data of a second set of users for which the sum covers the user's values and updates the counters of user in the second set.

Method to control the access of personal data of a user

A system includes a remote control device and a security device, wherein both devices share a unique and constant common key, algorithms or protocol specific to a pair formed by the remote control device and the security device. The unique and constant common key, algorithms or protocol are set up during a device initialization phase. The remote control device is configured to communicate wirelessly with a receiver of the security device. The remote control device, which is paired with the security device sending data towards the receiver, includes an encryption module and a memory to store the unique and constant common key. The data is encrypted by the encryption module with the unique and constant common key, and the security device includes a decryption module and a key corresponding to the unique and constant common key to decrypt the data received from the remote control device.

Secure remote control for audio/video receiver/decoder

A method to optimize reception of entitlement management messages in a subscriber unit that is part of a Pay-TV system. The subscriber units are set up to a default reception channel for receiving default entitlement management messages such as the ones addressed to all or a group of subscriber units controlled by the management system. When one or a plurality of operating parameters of a specific subscriber unit needs to be modified, the security module sends an information signal to the subscriber unit which switches to a specific reception channel. In this case only specific entitlement management messages, also called positive addressing entitlement management messages, are received for performing the operating parameters modification of the concerned subscriber units. Once the modification is executed, the subscriber unit switches back to the default reception channel to be ready for receiving default entitlement management messages again.

Method to optimize reception of entitlement management messages in a Pay-TV system

The aim of the invention is to provide a solution to ensure that the content sent by the IRD is the content effectively displayed on the screen. It is then proposed a system to prevent manipulation of transmitted video data comprising an Integrated Receiver Decoder (IRD) receiving audio/video data, a display device (TV), said IRD comprising means to transmit an HDMI compliant audio/video data stream toward the display device. This system comprising:

A method for sharing data and synchronizing broadcast data with additional information, the broadcast data and the additional information being provided by at least two distinct sources to a multimedia device. The method comprises steps of:

Method for sharing data and synchronizing broadcast data with additional information

This invention concerns a safe data exchange method between two devices locally connected to one another. In a preferred embodiment, the first device () is a security module containing a first encrypting key, said private key (PAKV) of a pair of asymmetric encrypting keys. The second device is a receiver () comprising at least one second encrypting key, said public key (PAKB) of said pair of asymmetric encrypting keys. Furthermore each of the devices comprises a symmetrical key (). The first device () generates a first random number (A), which is encrypted by said private key (PAKV), then transmitted to the second device (), in which it is decrypted by means of the public key (PAKB). The second device () generates a second random number (B), which is encrypted by said public key (PAKB), then transmitted to the first device (), in which it is decrypted by means of the private key (PAKV). A session key (SK), used for safe data exchange, is generated by a combination of the symmetric key () and the random numbers (A, B) generated and received by each of the devices.

Method for secure data exchange between two devices

For updating shared databases on a subscriber network, a managing center sends messages addressed to each of these bases. When one requires to address a great number of databases, the time to accede to each of them increases considerably considered the necessity to repeat the information to ensure the good reception of messages. Instead of addressing by name each database, it is proposed to transmit criteria in which a certain number of databases recognize themselves and apply a selective updating on these bases.

Growing community of inventors

Saint-Prex, Switzerland

Christophe Nicolas