Nagravision S.a.

Didier Hunacek

Pierre Sarda

Marco Macchetti

Patrick Servet

Minh Son Tran

Jerome Perrine

Christian Schwarz

John Tinsman

Jean-Bernard Fischer

Philippe Stransky-Heilkron

Nicolas Fischer

Frederic Thomas

Olivier Schaer

André Nicoulin

Frédéric Thomas

Jérôme Perrine

Herve Goupil

Devices, servers, systems and methods for content protection are provided. Disclosed embodiments improve temporal granularity of controlling access to the protected content and increase resilience against attacks attempting to prevent re-evaluation of conditions of access. Enforcement of re-evaluation may be based on the receipt and/or verification of tokens. In some embodiments, re-evaluation is enforced by periodically rendering content keys required for content decryption unuseable and/or clearing content keys already in use.

Content protection

The disclosure relates to a method of obtaining a cryptographic key in a chipset (). An initial configuration message may be generated using a physical unclonable function (hereinafter: PUF) () of the chipset (). Said PUF () may generate a predetermined value when using the initial configuration message as input to the PUF (). The initial configuration message may be transmitted to a client access server (). An altered configuration message may be received from the client access server (), wherein the altered configuration message is generated by the client access server () based on the initial configuration message. The cryptographic key may be obtained from the PUF () using the altered configuration message as input to the PUF ().

Cryptographic key configuration using physical unclonable function

The disclosure relates to a method for enabling the secure functions of a chipset () and especially the encryption of the content of the secure memory () when the device goes into low power mode. The content of the secure memory () may be encrypted and stored in an external memory () during low power mode of the chipset ().

Securing data stored in a memory of an IoT device during a low power mode

The present invention refers to the field of television experience in particular the simultaneous use of the portable computing device and a television to share a user's experience. The present disclosure proposes a method to create a snapshot from a video transmission received by a receiver, said receiver being connected with a portable computing device and having a screen output, said method comprising the steps of receiving a video transmission by the receiver, converting by the receiver, the video transmission into a lower-bandwidth video transmission, sending the lower-bandwidth video transmission to the portable computing device, receiving from the portable computing device to the receiver, a command to execute a snapshot, producing by the receiver a snapshot from the video transmission, sending the snapshot to the portable computing device.

Method and system to share a snapshot extracted from a video transmission

A method of transmitting entitlement messages to content consumption devices in a access control system, the method comprising periodically transmitting entitlement messages to content consumption devices in a access control system and periodically extending an expiry time comprised in the entitlement messages. The entitlement messages comprise indicator data indicating to the content consumption devices that subsequent entitlement messages loaded into a content consumption device after a first entitlement message is loaded into the content consumption device shall not be used by the content consumption device to access protected media content.

Pre-entitlement enforcement

A method for securing transmission of digital data in a communication network comprising a central station or a terminal and at least one device monitored by the central station via the communication network. The at least one device is configured to produce and to transmit a digital data stream to the central station or terminal. The at least one device further comprises a secure non-volatile memory for storing at least device specific information. The at least one device forms a data block based on at least the device specific information stored in the secure memory. The data block thus formed may compose additional data to be merged with the digital data stream produced by the at least one device. A modified digital data stream results from this merging operation and is transmitted by the at least one device to the central station or terminal.

Securing digital data transmission in a communication network

Content source and sink devices and methods help to guard against compromising security of content transferred from a source device to a sink device, for example where a primary encryption mechanism protecting the content has been compromised. A content source device is configured to connect to a content sink device to transmit digital media content to the content sink device. The content source device includes a connection module configured to establish a connection to the sink device, encrypt a digital media content for transmission across the connection with a first cipher using a connection key, and transmit the encrypted digital media content to the sink device over the connection. The content source also includes a protection module configured to prevent the sink device from using the digital media content without authorisation. The protection module receives a digital certificate identifying the sink device, verifies the digital certificate, and determines if the digital certificate identifies a sink device authorised to receive digital media content over the connection. If the determination is positive, the protection module enables the sink device to use the digital media content.

Protecting media content

The disclosure provides a method of making watermarking data embedded in an Elementary Stream ES accessible to a receiver. The ES comprises video and/or audio data and is to be transmitted as a Packetized Elementary Stream PES in a Transport Stream TS such that the receiver can use the watermarking data to watermark the video and/or audio data in the ES without reconstructing the ES from the TS. The watermarking data identifies one or more watermarking locations in the video and/or audio data in the ES to be modified by the receiver in accordance with the watermarking data. The method comprises determining respective one or more watermarking TS locations in the TS corresponding to the one or more watermarking locations. The method further comprises embedding, in the ES, the watermarking data including watermarking location information identifying the one or more watermarking TS locations, or modifying watermarking data embedded in the ES by adding the watermarking location information. The method may further comprise subsequent to embedding or modifying the watermarking data, packetizing the ES into one or more PES packets, each packet comprising a packet header, and adding watermarking data location information identifying a location in the TS corresponding to a location of the watermarking data in the ES to the packet header of a PES packet (or in a TS header or elsewhere in the TS). The disclosure also provides a corresponding method of watermarking and related systems, devices, computer programs and Transport Streams.

Embedding watermarking data

Methods and content consumption devices are disclosed that enable a revocation list to be securely enforced and managed, in terms of enforcing version control and providing granular control of individual capabilities, for example. Aspects also relate to enhanced enforcement control of content consumption control information more generally, for example by enforcing version control of activation messages, and/or granular management of individual capabilities.

Growing community of inventors

Blonay, Switzerland

Didier Hunacek