Irdeto B.v.

Irdeto Access B.v.

Gerard Johan Dekker

Andrew Augustine Wajs

Albert Jan Bosscha

Antonius Johannes Petrus Maria Van De Ven

Thomas Stockhammer

Arnoud Evert Van Foreest

Werner Stephanus Strydom

Bruce Victor Curtin

David Neil Siedle

Roelof Van Wijk

Ronaldus Petrus Johannes Hoogenboom

James Stewart Crosbie Palmer

Albert-Jan Bosscha

Systems and methods for producing individualized processing chips, each individualized processing chip being arranged to carry out a common processing operation are disclosed. A processing chip design is received, wherein the common processing operation is specified, at least in part, by the processing chip design. For each individualized processing chip the processing chip design is individualized to produce an individualized processing chip design, in accordance with an individualized set of transformations for the individualized processing chip, by including a respective set of modifications as part of the individualized processing chip design that implement the individualized set of transformations. Each transformation of the individualized set of transformations is a transform for an interconnect, specified in the processing chip design, of at least two logic cells specified in the processing chip design. For each individualized processing chip the individualized processing chip design is provided for fabrication of the individualized processing chip according to the individualized processing chip design. The individualized set of transformations for one individualized chip is different to the individualized set of transformations for at least one other individualized chip.

Systems and methods for creating individualized processing chips and assemblies

A method of individualizing a semiconductor chip of a batch of semiconductor chips with respective individualization data of the semiconductor chip, the method comprising, applying a plurality of circuit layouts to the semiconductor chip to form a plurality of circuits on the semiconductor chip, wherein for each circuit layout, said circuit layout is arranged such that, (a) the corresponding circuit, when triggered, falls into any one of two or more respective triggered states, and (b) one of the two or more respective triggered states is a respective preferred state defined by said circuit layout, wherein the plurality of respective preferred states of the circuits in the plurality of circuits encode the individualization data, and wherein each individualized semiconductor chip of the batch of semiconductor chips comprises a generic circuit.

Secured chip

A method for accessing content at a device, wherein the device is arranged to execute a digital rights management (DRM) client of a DRM system and wherein the device is arranged to receive a broadcast signal comprising a plurality of encrypted portions of content for an item of content, each encrypted portion being packaged in a format of a conditional access system and being decryptable using a corresponding decryption key, wherein the method comprises an application executing on the device performing the steps of: for each of one or more of the encrypted portions: converting said encrypted portion from being packaged in the format of the conditional access system to being packaged in a format of the DRM system; providing said encrypted portion is packaged in the format of the DRM system to the DRM client; and either (a) providing a rights object according to the DRM system to the DRM client or (b) triggering the DRM client to obtain a rights object according to the DRM system; wherein the rights object corresponds to said encrypted portion by comprising decryption key data for use by the DRM client to obtain the decryption key corresponding to said encrypted portion.

Accessing content at a device

The invention enables the shared secret, which is used for encrypting the communication of CWs from a smartcard to a receiver, to cover at least a part of a binary image of firmware that is executing in the receiver. Preferably the shared secret covers the entire binary image of the firmware. Hereto, data from one or more predefined firmware memory locations are read, the set of data forming the shared secret.

Preventing the use of modified receiver firmware in receivers of a conditional access system

The invention provides a solution for secure and non-manipulatable processing of a data stream in a receiver, possibly in conjunction with a smartcard. A packet identity and a content type identifier associated with the packet identifier are received in encrypted form and securely processed within the receiver to allow an encrypted payload of the data stream to be processed without the possibility to manipulate the content type identifier in an attempt to intercept the payload after decryption.

Reliable and non-manipulatable processing of data streams in a receiver

A method of authorising conditional access to an encrypted digital data product, includes storing at least one set of entitlements in a secure device, each entitlement including a product identifier and expiry information, receiving entitlement control messages from a decoder system including a device for decrypting encrypted digital data products using control words, each entitlement control message including a product identifier, and in a first mode, returning at least one control word in response to an entitlement control message including a product identifier if the product identifier corresponds to a product identifier in a stored entitlement including expiry information indicating the entitlement to be valid, and, in a second mode, progressively adjusting a counter to a pre-determined value and returning at least one control word in response also to entitlement control messages including a product identifier if the product identifier corresponds to a product identifier in a stored entitlement including expiry information indicating expiry of the entitlement and if the counter is at a value between an initial value and the pre-determined value. The counter is set to an initial value to commence operation in the second mode upon receiving an entitlement control message including a product identifier corresponding to a product identifier in a stored entitlement that includes expiry information indicating expiry of the entitlement.

Method and device for authorising conditional access

A method of partially scrambling a data stream () including transport stream packets (), each transport stream packet () having a header () and a payload (), wherein a sequence of transport stream packets () has payloads carrying encoded data elements, arranged in units (), includes: selecting transport stream packets () forming a subsequence of the sequence, and scrambling at least part of the payloads () of each transport stream packet () in the subsequence. The method further includes monitoring the payloads () of at least some of the transport stream packets () in the sequence for the presence of data () indicating a boundary between two subsequent units (), and, for selected units (), including at least one of the transport stream packets () carrying data forming part of the selected unit () in the sub-sequence.

Method of partially scrambling a data stream

A method of external data storage in a system including a primary processing device, having a processor and a primary data storage unit, adapted to run application programs for processing active records in the processor and configured to store data belonging to active records in the primary data storage unit; and a secondary data storage system, accessible to the primary processing device, includes loading data belonging to an active record into the primary data storage unit and externalising the record by transferring at least a piece of data belonging to the record to the secondary data storage system for storage. The step of externalising a record includes the making of a call by an application program using data belonging to the record to an interface, arranged to transfer the piece of data to the secondary data storage system.

Method and system of externalising / internalising a data record that allow processing of part or all of the record

A method of external data storage in a system including a primary processing device, having a processor and a primary data storage unit, adapted to run application programs for processing active records in the processor and configured to store data belonging to active records in the primary data storage unit; and a secondary data storage system, accessible to the primary processing device, includes loading data belonging to an active record into the primary data storage unit and externalizing the record by transferring at least a piece of data belonging to the record to the secondary data storage system for storage. The step of externalizing a record includes the making of a call by an application program using data belonging to the record to an interface, arranged to transfer the piece of data to the secondary data storage system.

Method and system of externalising/internalising data record that allow processing of part or all of the record

A system for processing an information signal comprises a system () for scrambling the information signal and at least one system () for descrambling the scrambled information signal. The scrambling system () comprises means () for analysing the entropy distribution of the information signal, means () for scrambling the information signal in dependence on the entropy distribution of the information signal to provide a scrambled information signal having an entropy distribution corresponding with the entropy distribution of the information signal and means () for compressing the scrambled information signal. The descrambling system () comprises means () for decompressing the compressed scrambled information signal and means () for descrambling the scrambled information signal to provide the information signal.

Growing community of inventors

Nieuw-Vennep, Netherlands

Gerard Johan Dekker