Nagravision S.a.

Nagracard S.a.

Michael John Hill

Christophe Nicolas

Marco Sasselli

Fabien Gremaud

Nicolas Fischer

Guy Moreillon

André Nicoulin

Christophe Gogniat

Maxime Goeke

Marc Uldry

Jean-Michel Puiatti

The aim of the present invention is to provide a security module capable of supporting the different functions of the latest and the previous generations, by avoiding any possible attack due to this adaptability. This aim is attained by a security module comprising first communication means to a host device, first storage means and first decryption means, characterized in that it includes a state module and second communication means and physical activation or deactivation means of said second means, such activation or deactivation being managed by the state module.

Upgradable security module

The aim of the present invention is to propose a method and a device with the aim of avoiding problems which could ensue following the de-synchronization of a program counter during the execution of a program. This aim is achieved by a method for controlling the execution of a program involving separating the program into a number of blocks of instructions and adding an input control section and an output control section to each block. The control sections have conditions for entry to the block and conditions for exit from the block. This can be used to check the validity of the execution of a program by verifying the execution history of the program. Action can be taken in the case that any anomaly is found in the program execution compared to the expected execution.

Method to control the execution of a program by a microcontroller

Example embodiments are directed to a digital audio/video (AV) data processing unit and a method of controlling access to the digital AV data. The processing unit of AV digital data includes a deciphering unit of the AV data, a decompression unit, an input/output interface of the processed AV data and communication device towards a security module. The deciphering and decompression units respectively include an encryption unit and a decryption unit, each having at least one personal key and a common encryption key. Deciphering the AV data using the control words and re-encrypting the deciphered AV data occurs only after a successful verification of the control word and the common key. After temporary storage, the re-encrypted AV data cannot be decrypted by the decryption unit unless the common key has been positively verified by the security module by way of a random number generated by the decryption unit.

Unit for managing audio/video data and access control method for said data

The present invention proposes an encryption/decryption method able to resist against various attack strategies such as Simple Power Analysis, Timing Analysis or Differential Power Analysis. The method is carried out by a plurality of encryption/decryption modules arranged in series, wherein an encryption/decryption module, different from the first module, starts encryption/decryption operations as soon as said module receives a part of the results of encryption/decryption operations from the immediately preceding encryption/decryption module.

Multiple module encryption method

The aim of the present invention is to propose a method that allows the reduction of the bandwidth needs in a structure that implements an operating center and a plurality of user units, ensuring the availability for the final user, of a product amongst a vast choice and being able to be downloaded by said user in a short period of time. This aim is achieved by a system that implements at least one operating center that has a great number of products, a plurality of user units comprising security and storage means, characterized in that the link between at least one group of user units is of the bidirectional type and that the operating center comprises means for the transfer of a product that is stored in the storage means of a user unit to another user unit.

Distributed information and storage system

Method and a device for guaranteeing the integrity and authenticity of data transmitted between a management center and one or several receiver units, wherein each receiver unit comprises a decoder (IRD) and a security unit (SC) and means for communicating (NET, REC) with the management center. The method consists in calculating a check information (Hx) representative of the result of a unidirectional and collision-free function, performed on all or part of the transmitted data and in transmitting the result to the management center for verification. The center will be able to inform the decoder concerning the authenticity of the data through return channels or through the main channel.

Method and device for guaranteeing the integrity and authenticity of a set of data

This invention concerns a conventional smart card comprising a rosette of eight contacts of the ISO 7816 type and at least one standard bi-directional channel, through which the exchange of data at a speed of about 500 Kbits/sec is possible. To allow the use of such a card in an environment that needs a processing of information of several Mb we propose to add on this card a high-speed series channel linked to non used connections by the standard bi-directional channel and to format a second bus (HSD) on which are linked several coding/decoding modules and multiplexing module (MUX). These modules are also linked to the conventional bus of the card.

Growing community of inventors

Coppet, Switzerland

Michael John Hill