Nagrastar LLC

Echostar Technologies Corporation

Nagravision S.a.

Gregory Duval

Benjamin Brian Ellis

William Michael Beals

Nicolas Fischer

Steven Michael Casagrande

Henri Kudelski

Christopher Boyd Tirpak

Jerome Perrine

Hervé Goupil

Michael Augustin Busch

Maurice Gerard Van Riek

Benjamin Brain Ellis

Examples of the present disclosure describe systems and methods for implementing a cloud-based private area network. In aspects, various customer devices may be connected to a cloud-based carrier or wireless carrier. The carrier may use identification information associated with each customer device to group devices by, for example, customer account. For each customer account, the carrier may create and/or assign a customer-specific gateway. The customer gateway may enable devices identified as associated with an account to detect and communicate securely with each other over a cloud-based private area network. Additionally, each customer gateway may provide several functions typically found in private or home gateways and local area networks (LANs) to the devices associated with an account.

Cloud-based private area network

A method and a system relates to a cellular-network assisted Pay-Per-View (PPV). An issue arises in reconciling PPV purchase balance data when a Set-top Box (STB) lacks a communication link to the PPV headend server. The present disclosure addresses the issue by using a mobile computing device for delivering the PPV balance data from the STB to the PPV headend server over a cellular-network. The mobile computing device receives the PPV balance data from the Conditional Access Module (CAM) on STB through near-field communications. The mobile computing device, when it is moved to inside a service coverage area of a cellular or Wi-Fi-network, transmits the PPV balance data to the PPV headend server. The PPV headend server updates the PPV balance data and transmits the updated PPV balance data to the CAM on STB via the satellite broadcasting network.

Method and system for cellular network-assisted pay-per-view

Examples of the present disclosure describe systems and methods for implementing an external module comprising new and/or offloaded processing functionality. In aspects, an external module may be configured to be selectively and communicatively coupled to an information appliance device. The external module may be configured with or receive hardware, software, data and/or instructions for processing content and operations received by the information appliance device. When operations are received by the information appliance device, the information appliance device may parse the operations into commands to be performed by the information appliance device and commands to be performed by the external module. The information appliance device may transmit the commands to be performed by the external module to the external module. The external module may then process and/or perform the received commands and render the resulting content to a display device.

External module comprising processing functionality

Systems and methods for implementing a Transport I/O system are described. Network encrypted content may be received by a device. The device may provide the network encrypted content to a secure processor, such as, for example, a smart card. The secure processor obtains a network control work that may be used to decrypt the network encrypted content. The secure processor may decrypt the network encrypted content to produce clear content. In embodiments, the secure processor may then use a local control word to generate locally encrypted content specific to the device. The device may then receive the locally encrypted content from the secure processor and proceed to decrypt the locally encrypted content using a shared local encryption key. The transport I/O system ensures the protection of the network control word by maintaining the network control word on the secure processor.

Systems and methods for performing transport I/O

The various examples described herein generally provide systems and methods for generating a hybrid electronic programming guide (EPG) that includes both broadcast content and other types of content, such as over-the-top (OTT) content. In examples, broadcast content may be content provided by a satellite, terrestrial, or cable television provider. Other types of content, e.g., the OTT content, may be content that is delivered over an open network, such as the Internet. In examples, a secure processor may be employed to determine if a subscriber is authorized to access the OTT content based on subscription information received via a broadcast transmission.

Hybrid electronic program guide

Systems and methods for implementing a Transport I/O system are described. Network encrypted content may be received by a device. The device may provide the network encrypted content to a secure processor, such as, for example, a smart card. The secure processor obtains a network control word that may be used to decrypt the network encrypted content. The secure processor may decrypt the network encrypted content to produce clear content. In embodiments, the secure processor may then use a local control word to generate locally encrypted content specific to the device. The device may then receive the locally encrypted content from the secure processor and proceed to decrypt the locally encrypted content using a shared local encryption key. The Transport I/O system ensures the protection of the network control word by maintaining the network control word on the secure processor.

Systems and methods for implementing a Transport I/O system are described. Network encrypted content may be received by a device. The device may provide the network encrypted content to a secure processor, such as, for example, a smart card. The secure processor obtains a network control word that may be used to decrypt the network encrypted content. The secure processor may decrypt the network encrypted content to produce clear content. In embodiments, the secure processor may then use a local control word to generate locally encrypted content specific to the device. The device may then receive the locally encrypted content from the secure processor and proceed to decrypt the locally encrypted content using a shared local encryption key. The secure processor may connect to the device via a standard connection, such as via a USB 3.0 connector.

USB interface for performing transport I/O

Systems and methods are disclosed for performing anti-piracy countermeasures in order to prevent unauthorized access of protected content. A conditional access system may be modified to include a counter. The counter is incremented every time the conditional access system receives a request that is a potential indication of pirate activity. The counter may also be decremented every time the conditional access system receives a request indicative of legitimate activity. If the conditional access system receives a management message containing a key required to access content keys, the conditional access system cheeks the counter. If the counter is below a threshold value, the conditional access system obtains the key. However, if the counter is above the threshold value, the conditional access system disregards the key contained in the management message, thereby losing access to protected content.

Anti-splitter violation conditional key change

The present disclosure relates to systems and methods for assembling and extracting command and control data. In embodiments of the present disclosure, the command and control data is segmented and inserted into multiple packet headers. The header packets are identified by flags such as 'First portion,' 'Middle portion,' &#x201c;Last portion,&#x201d; or &#x201c;Null Byte.&#x201d; When a receiver extracts the command and control data from the headers, it tracks the flags associated with the headers. The command and control data is saved to buffer in association with its associated flag. The receiver uses the flags to determine when all command and control data headers have been received. The command and control data is then reconstructed and used to decrypt audio visual content.

Systems and methods for assembling and extracting command and control data

Systems and method are disclosed for performing profiling on a secure device. In embodiments, a plurality of counters are established. Each counter may be related to a different type of message. When the secure device receives and/or processes a message, it determines the type of message and adjusts a counter related to the determined message type. A ratio may be computed between the different counters. When the ratio deviates from a threshold, the secure device may be performing illegitimate operations, and one or more countermeasures are deployed against the illegitimate secure device.

Secure device profiling countermeasures

Systems and methods for performing cascading dynamic crypto periods are disclosed. In embodiments, a control word and a set of functions is transmitted between a head-end and recipient devices at the beginning of a crypto period. The crypto period is divided into a discrete number of sub-crypto periods. The control word used to encrypt and decrypt the broadcast content is changed during each sub-crypto period. At the end of the first sub-crypto period, a derived control word is generated by passing the original control word to a function in the set of functions in order to generate a derived control word at the first transition between sub-crypto periods. The derived control word is used for encryption and decryption of the broadcasted content during the second sub-crypto period. Upon transitioning to the third sub-control-period, the derived control word is input into another function to produce a second derived control word.

Growing community of inventors

Englewood, CO, United States of America

Gregory Duval