The Directv Group, Inc.

Inside Secure

David Ha

Raynold M Kahn

Gregory J Gagnon

Peter M Klauss

Thomas H James

Christopher P Curren

Ronald Paul Cocchi

Dennis R Flaharty

Michael A Gorman

Jacob T Carson

Matthew A Skubiszewski

A method, apparatus, article of manufacture, and a memory structure for providing a security infrastructure that permits the programming of limited hardware resources that can accept newly downloaded applications and securely support a very large number of services offered by content providers each have the potential to utilize their own independent CAS/DRM system. The CE device owner can consume content from a variety of sources and enable switching among different and existing CAS/DRM security profiles as required by the content provider applications loaded in CE devices.

Method and apparatus for a blackbox programming system permitting downloadable applications and multiple security profiles providing hardware separation of services in hardware constrained devices

A method and apparatus for storing and retrieving program material for subsequent replay is disclosed. The method comprises the steps of receiving a data stream comprising the program material encrypted according to a first (CW) encryption key, decrypting the program material; re-encrypting the program material according to a second encryption key, and storing the re-encrypted material in a media storage device. The program material is played back by retrieving the re-encrypted material from the media storage device and decrypting the re-encrypted program material. In one embodiment, the media storage device also stores the second encryption key which has been further encrypted by a key that is unique to the device used to receive the program material.

Secure storage and replay of media programs using a hard-paired receiver and storage device

A system and method for storing and retrieving program material for subsequent replay is disclosed. The method includes accepting a receiver ID associated with a receiver key stored in a memory of the receiver, determining a pairing key for encrypting communications between the conditional access module and the receiver, encrypting the pairing key with the receiver key, and transmitting a message comprising the encrypted pairing key to the receiver. The apparatus comprises a receiver for receiving a data stream transmitting a media program encrypted according to a media encryption key and an encrypted media encryption key and a conditional access module, communicatively coupleable with the receiver.

Method and apparatus for encrypting media programs for later purchase and viewing

A method and apparatus for storing and retrieving program material for subsequent replay is disclosed. The method comprises the steps of receiving a data stream comprising the program material encrypted according to a first encryption key, decrypting the program material; re-encrypting the program material according to a second encryption key; and storing the re-encrypted material in a media storage device. The program material is played back by retrieving the re-encrypted material from the media storage device and decrypting the re-encrypted program material. In one embodiment, the second encryption key is derived from metadata describing replay rights. In a further embodiment, the media storage device also stores the second encryption key which has been further encrypted by a key that is unique to the device used to receive the program material.

An apparatus and method for transmission security is presented. In one embodiment, the apparatus comprises a receiver communicatively coupleable to an identifiable replaceable conditional access module (CAM) identified by an identification to enable reception of the service, and an authenticator controlling the operability of the receiver according to a comparison between the identification and a list comprising an identification of a plurality of CAMs, wherein the authenticator renders the receiver inoperable according to the comparison.

Embedded blacklisting for digital broadcast system security

A method and apparatus for storing and retrieving program material for subsequent replay is disclosed. In summary, the present invention describes a system and method for storing and retrieving program material for subsequent replay. The method comprises the steps of accepting encrypted access control information and the program material encrypted according to a first encryption key, the access control information including a first encryption key and control data; decrypting the received access control information to produce the first encryption key; decrypting the program material using the first encryption key; re-encrypting the program material using according to a second encryption key; encrypting the second encryption key according to a third encryption key to produce a fourth encryption key; and providing the re-encrypted program material and a fourth encryption key for storage. The apparatus comprises a conditional access module, for accepting encrypted access control information and the program material encrypted according to a first encryption key, the encrypted access control information including the first encryption key and temporally-variant control data, the control access module comprising a first decryption module, for decrypting the access control information to produce the first encryption key; a first encryption module, for encrypting a second encryption key with a third encryption key to produce a fourth encryption key; and a second decryption module for decrypting the fourth encryption key to produce the second encryption key.

Super encrypted storage and retrieval of media programs with smartcard generated keys

A method, apparatus, and article of manufacture provide the ability to process digital media content. A secret key (Ka) is obtained and encrypted into an authorization key message (AKM) message. One or more entitlement keys (Ke) are then obtained and encrypted using the secret key (Ka) as an encryption key into an entitlement management message (EMM). One or more media content encryption keys (Kc) are obtained and encrypted using one or more of the entitlement keys (Ke) as encryption keys into an entitlement control message (ECM). Digital media data content (Dc) is then obtained and encrypted using the one or more media content encryption keys (Kc). The AKM, EMM, ECM, and encrypted digital media data content are then delivered to a set-top box that is configured to provide digital media services with the content.

Digital media conditional access system for handling digital media content

A method and apparatus for storing and retrieving program material for subsequent replay is disclosed. The apparatus comprises a tuner, for receiving a data stream comprising encrypted access control information and the program material encrypted according to a first encryption key, the access control information including the first encryption key; a first encryption module, communicatively coupled to the tuner and communicatively coupleable to a media storage device, for further encrypting the encrypted program material according to a second encryption key and for encrypting the second encryption key according to a third encryption key to produce a fourth encryption key; a first decryption module communicatively coupleable to the media storage device, for decrypting the fourth encryption key retrieved from the media storage device using the third encryption key to produce the second encryption key, and for decrypting the further encrypted program material retrieved from the media program device to produce the encrypted program material; a conditional access module communicatively coupled to the first decryption module, for decrypting the encrypted access control information to produce the first encryption key; and a second decryption module, for decrypting the program material using the first encryption key.

Super encrypted storage and retrieval of media programs in a hard-paired receiver and storage device

A method and apparatus for receiving conditional access information (CAI) on one or more of a plurality of tuners while the user is selecting different channels is disclosed. The method comprises the steps of receiving the CAI on a first tuner tuned to a first channel; identifying the first tuner as the tuner receiving the CAI; and commanding the second tuner to receive the CAI after receiving a command to retune the first tuner from the first channel to a second channel.

Method and apparatus for ensuring reception of conditional access information in multi-tuner receivers

A method and apparatus for storing and retrieving program material for subsequent replay is disclosed. The apparatus comprises a conditional access module, for accepting encrypted access control information and the program material encrypted according to a first encryption key, the encrypted access control information including a first encryption key and temporally-variant control data; the conditional access module having a first decryptor module, for decrypting the encrypted access control information to produce the temporally variant control data; a conversion module for modifying the temporally-variant control data to produce temporally-invariant control data; a re-encryptor module, for re-encrypting the decrypted access control information; a second decryptor module for decrypting the re-encrypted access control information to produce the first encryption key; a copy protection encryption module, communicatively coupleable to the conditional access module and a media storage device, the copy protection encryption module for further encrypting the encrypted program material according to a second encryption key and for encrypting the second encryption key according to a third encryption key to produce a fourth encryption key; and a copy protection decryption module, communicatively coupleable to the conditional access module and the media storage device, the copy protection decryption module for decrypting the encrypted fourth encryption key to produce the second encryption key using the third encryption key.

Super encrypted storage and retrieval of media programs with modified conditional access functionality

An apparatus and method for transmission security is presented. A receiver communicatively coupleable to an identifiable conditional access module (CAM) to enable reception of the service uses an authenticator to control the operability of the receiver according to a comparison between the identified conditional access module and a list of conditional access modules.

A method and apparatus for receiving conditional access information (CAI) on one or more of a plurality of tuners receiving the CAI from a first tuner of the plurality of tuners is disclosed. The method comprises the steps of determining if the CAI is of a first type that is transmitted by all of a plurality of transponders or of a second type that is transmitted by fewer than all of the plurality of transponders; passing, to a conditional access module, only CAI from the first tuner and rejecting CAI from any other tuner if the CAI is of a type that is transmitted by all transponders; and passing, to the conditional access module, all CAI from any of the plurality of tuners if the CAI is of a type that is transmitted by fewer than all transponders.

Method and apparatus for minimizing conditional access information overhead while ensuring conditional access information reception in multi-tuner receivers

Growing community of inventors

San Gabriel, CA, United States of America

David Ha