Nagravision S.a.

Nagra France Sas

Yishan Zhao

Corinne Le Buhan

Laurent Gauteron

Bernard Benoit

Francois Fer

Jean-Claude Fournier

François Fer

Disclosed herein are methods and systems for enabling legal-intercept mode for a targeted secure element. In an embodiment, a method includes embedding a first key-negotiation parameter associated with a target client device into an intercept secure encryption element; configuring an encryption-management device to receive the intercept secure encryption element and to receive a second key-negotiation parameter associated with the target client device and obtained from a service-provider system, the encryption-management device configured to embed the second key-negotiation parameter into the intercept secure encryption element; and providing the intercept secure encryption element to a communications-intercept system configured to obtain intercepted messages associated with the target client device, the intercepted messages comprising session-key-negotiation messages and associated data messages encrypted with a corresponding negotiated session key, wherein the intercept secure encryption element is configured to (i) identify the negotiated session key based on the session-key-negotiation messages and the first and second key-negotiation parameters and (ii) decrypt the data messages with the negotiated session key.

Methods and systems for enabling legal-intercept mode for a targeted secure element

A method of transmitting authorization messages to a plurality of mobile receivers comprises the steps of defining at least one set of authorization messages, a first part of which, forming a first message category, is intended for a first group of mobile receivers, a second part of which, forming a second message category, is intended for a second group of mobile receivers; creating a first authorization message packet containing at least the first part of the set of authorization messages; creating a second authorization message packet containing at least the second part of the set of authorization messages; transmitting the first authorization message packet over a first service, without previously sending information indicating to which mobile receivers the message packets are directed; and transmitting the second authorization message packet over a second service without previously sending information indicating to which mobile receivers the message packets are directed.

Method of processing authorization messages destined for a plurality of mobile receivers and method of transmitting such messages

Example embodiments are directed to a revocation lists management method, namely a verification method of a target device connected to a master device, the master device having means to receive a content transmitted by a broadcast centre via a data stream, the master device and the target device authenticating themselves by the exchange of a certificate having at least one certificate identifier. The method includes transmitting by broadcast a target device verification table containing a certificate identifier list, storing certificate identifier list in the master device, extracting a verification data associated to the content, the verification data including the activation or the deactivation of the verification of the target device. If the verification data includes the activation of the verification, the method includes verifying the certificate of the target device by the master device using at least one list stored to authorize or prohibit the exchanges of data with the target device.

Verification method of a target device connected to a master device

Growing community of inventors

Antony, France

Yishan Zhao