Nagravision S.a.

Jean-Bernard Fischer

Fabien Gremaud

Brecht Wyseur

Frederic Thomas

Didier Hunacek

Nicolas Fischer

Christian Schwarz

Karine Villegas

Patrik Marcacci

Marco Macchetti

Patrick Servet

Ivan Baroffio

Remi Cohen-Scali

David Farcy

The present disclosure proposes method and systems for establishing secure communication session(s) between a first device and a second device, where the first device operates in a user network and implements a first key exchange protocol for secure communication. The second device is capable of communicating with the first device over a wireless communication network. The second device implements a second key exchange protocol that is different to the first key exchange protocol for secure communication. A proxy entity configured for implementing the first and the second key exchange protocols for secure communication is provided. The proxy entity is configured for generating and/or provisioning one or more session keys for the first and the second devices using the key exchange protocols specific to each device for establishing secure communication between the first and second device based on the generated session key(s).

Key negotiation and provisioning for devices in a network

In overview, a computer-implemented method of transmitting data in a data stream from a first device to a second device is disclosed. The data stream is encrypted before transmission from the first device to the second device, and a location of the data in the data stream is indicated to the second device. The location may be a pre-shared location between the first and second devices, or the first device may transmit the location of the data to the second device. The second device decrypts the encrypted data stream, identifies the data in the data stream based on the location, and encrypts the identified data in the data stream.

Securely transmitting data in a data stream

The disclosure generally relates to a method for accessing media content, said method being used in a receiver. The method comprises a preparation phase and a use phase. The preparation phase comprises the steps of obtaining, by said receiver, a catalog of media content items, each media content item corresponding to a media content and comprising at least an item description and an item identification data and storing said catalog of media content items in a local database in a memory of the receiver. The use phase comprises the steps of accessing, by a mobile display device, said catalog of media content items through a local communication channel; displaying at least a part of the catalog of media content items on the mobile display device; selecting, by said mobile display device, at least one media content item displayed on the mobile display device; transmitting, by said mobile display device, a request to a content provider, the request comprising the item identification data corresponding to said selected media content item and additional data allowing for the receiver to be identified, said transmission using a first remote communication channel distinct from said local communication channel; and obtaining by the receiver, the media content corresponding to the media content item identified by the identification data contained in said request. The disclosure further relates to a receiver and a mobile display device for implementing the above described method and a system comprising at least said receiver and said mobile display device.

Method, receiver, mobile display device and system for accessing media content

The present disclosure proposes method and systems for establishing secure communication session (s) between a first device and a second device, where the first device operates in a user network and implements a first key exchange protocol for secure communication. The second device is capable of communicating with the first device over a wireless communication network. The second device implements a second key exchange protocol that is different to the first key exchange protocol for secure communication. A proxy entity configured for implementing the first and the second key exchange protocols for secure communication is provided. The proxy entity is configured for generating and/or provisioning one or more session keys for the first and the second devices using the key exchange protocols specific to each device for establishing secure communication between the first and second device based on the generated session key(s).

The present disclosure includes methods, devises and systems for preparing and installing one or more application keys owned by application owners in a remote device. The present disclosure further proposes methods, devices and systems for secure installation of subsequent application keys on a device utilising corresponding key derivation functions to associate an application with a respective policy and identifier using significantly Imv bandwidth for transfer of keys for execution of the respective application on the device.

Secure installation of application keys

The present disclosure relates to a wireless token capable of representing a user network, the token being used to automatically provision an IoT enabled device to connect to the user network. Functions required to achieve this include: authenticate the token with the user network, and responsive to said authentication, obtain and store configuration information for enabling the token to communicatively couple one or more devices at or within a defined proximity to the token, with the user network; responsive to a wireless signal received from a given device among the one or more devices, establish a temporary secure communication channel between the given device and the token; and provide the configuration information from the token to the given device using the temporary secure communication channel, wherein the configuration information enables the given device to establish a connection with and operate in the user network based on the obtained configuration information.

Facilitating network connectivity

The present invention relates in particular to a pairing method between a multimedia unit and one operator having an operator identifier, the multimedia unit having a multimedia unit identifier and receiving conditional access data from said operator, the method being characterized in that: said multimedia unit further having a function of the multimedia unit and said operator further having a function of the operator, these functions being such that the result of the application of the function of the operator to said operator key and to said multimedia unit identifier is equal to the result of the application of the function of the multimedia unit to said multimedia unit key and to said operator identifier, this result forming a pairing key between said multimedia unit and said operator.

Pairing method between a multimedia unit and at least one operator, multimedia unit, operator and personalization entity for the implementation of this method

The present disclosure includes methods, devises and systems for preparing and installing one or more application keys owned by application owners in a remote device. The present disclosure further proposes methods, devices and systems for secure installation of subsequent application keys on a device utilising corresponding key derivation functions to associate an application with a respective policy and identifier using significantly low bandwidth for transfer of keys for execution of the respective application on the device.

A method of transmitting entitlement messages to content consumption devices in a access control system, the method comprising periodically transmitting entitlement messages to content consumption devices in a access control system and periodically extending an expiry time comprised in the entitlement messages. The entitlement messages comprise indicator data indicating to the content consumption devices that subsequent entitlement messages loaded into a content consumption device after a first entitlement message is loaded into the content consumption device shall not be used by the content consumption device to access protected media content.

Pre-entitlement enforcement

The disclosure generally relates to a method for accessing media content, said method being used in a receiver (). The method comprises a preparation phase and a use phase. The preparation phase comprises the steps of obtaining, by said receiver (), a catalog of media content items, each media content item corresponding to a media content and comprising at least an item description and an item identification data and storing said catalog of media content items in a local database in a memory () of the receiver (). The use phase comprises the steps of accessing, by a mobile display device (), said catalog of media content items through a local communication channel (); displaying at least a part of the catalog of media content items on the mobile display device (); selecting, by said mobile display device (), at least one media content item displayed on the mobile display device; transmitting, by said mobile display device (), a request to a content provider (), the request comprising the item identification data corresponding to said selected media content item and additional data allowing for the receiver () to be identified, said transmission using a first remote communication channel () distinct from said local communication channel (); and obtaining by the receiver (), the media content corresponding to the media content item identified by the identification data contained in said request. The disclosure further relates to a receiver () and a mobile display device () for implementing the above described method and a system comprising at least said receiver and said mobile display device.

Methods and content consumption devices are disclosed that enable a revocation list to be securely enforced and managed, in terms of enforcing version control and providing granular control of individual capabilities, for example. Aspects also relate to enhanced enforcement control of content consumption control information more generally, for example by enforcing version control of activation messages, and/or granular management of individual capabilities.

Capability revocation in a content consumption device

A method for watermarking an encrypted digital content stored in a content distribution network (CDN) method comprises the steps of receiving in the CDN, a non-watermarked encrypted content and marking metadata, said non-watermarked encrypted content being the result of an encryption of a non-watermarked clear content by a stream cipher process, said marking metadata indicating locations in the content suitable for a modification of said content; using a watermark formed of watermark values and corresponding to a unique identifier; and producing a watermarked encrypted content by combining in the CDN, with a combination function, the values forming the watermark with the non-watermarked encrypted content in locations indicated by the marking metadata.

Method for watermarking encrypted digital content, method and device for retrieving a unique identifier from watermarked content and content distribution network

A method to protect a media content encrypted by a media content key, said method being carried out by a security module embedded into a reception device and connected to a consumption device, comprising: receiving an encrypted media content, encrypted by a media content key; receiving a message, being encrypted by a personal key of the security module, containing the media content key; decrypting the message by the personal key to retrieve the media content key; decrypting the encrypted media content by the media content key; generating a current local key; encrypting a portion of the media content by the current local key, said portion defining a chunk; transmitting the current local key to the consumption device; transmitting the encrypted chunk to the consumption device; repeating the previous four steps for different chunks of the media content and modifying the current local key for the different chunks.

Growing community of inventors

Rochejean, France

Jean-Bernard Fischer