AU751436B2 - Mechanism for matching a receiver with a security module - Google Patents

Mechanism for matching a receiver with a security module Download PDF

Info

Publication number
AU751436B2
AU751436B2 AU35297/99A AU3529799A AU751436B2 AU 751436 B2 AU751436 B2 AU 751436B2 AU 35297/99 A AU35297/99 A AU 35297/99A AU 3529799 A AU3529799 A AU 3529799A AU 751436 B2 AU751436 B2 AU 751436B2
Authority
AU
Australia
Prior art keywords
receiver
detachable
security
module
descrambling
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
AU35297/99A
Other versions
AU3529799A (en
Inventor
Andre Kudelski
Marco Sasselli
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nagravision SARL
Original Assignee
NagraCard SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Family has litigation
First worldwide family litigation filed litigation Critical https://patents.darts-ip.com/?family=11004712&utm_source=google_patent&utm_medium=platform_link&utm_campaign=public_patent_search&patent=AU751436(B2) "Global patent litigation dataset” by Darts-ip is licensed under a Creative Commons Attribution 4.0 International License.
Application filed by NagraCard SA filed Critical NagraCard SA
Publication of AU3529799A publication Critical patent/AU3529799A/en
Application granted granted Critical
Publication of AU751436B2 publication Critical patent/AU751436B2/en
Assigned to NAGRACARD S.A. reassignment NAGRACARD S.A. Amend patent request/document other than specification (104) Assignors: NAGRACARD S.A.
Assigned to NAGRAVISION S.A. reassignment NAGRAVISION S.A. Alteration of Name(s) in Register under S187 Assignors: NAGRACARD S.A.
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/436—Interfacing a local distribution network, e.g. communicating with another STB or one or more peripheral devices inside the home
    • H04N21/4367—Establishing a secure communication between the client and a peripheral device or smart card
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/109—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM] by using specially-adapted hardware at the client
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/16—Program or content traceability, e.g. by watermarking
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/305—Authentication, i.e. establishing the identity or authorisation of security principals by remotely controlling device operation
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/606—Protecting data by securing the transmission between two devices or processes
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/72—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in cryptographic circuits
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/72—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in cryptographic circuits
    • G06F21/725—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in cryptographic circuits operating on a secure reference time value
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/77—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in smart cards
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/82—Protecting input, output or interconnection devices
    • G06F21/85—Protecting input, output or interconnection devices interconnection devices, e.g. bus-connected or in-line devices
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/0806—Details of the card
    • G07F7/0813—Specific details related to card security
    • G07F7/0826—Embedded security module
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/41—Structure of client; Structure of client peripherals
    • H04N21/418—External card to be used in combination with the client device, e.g. for conditional access
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/41—Structure of client; Structure of client peripherals
    • H04N21/418—External card to be used in combination with the client device, e.g. for conditional access
    • H04N21/4181—External card to be used in combination with the client device, e.g. for conditional access for conditional access
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/167—Systems rendering the television signal unintelligible and subsequently intelligible
    • H04N7/1675—Providing digital key or authorisation information for generation or regeneration of the scrambling sequence
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2143—Clearing memory, e.g. to prevent the data from being stolen

Description

-1- MECHANISM OF MATCHING BETWEEN A RECEIVER AND A SECURITY MODULE TECHNICAL FIELD This invention relates to a system for controlling the transfer of information between a receiver and a security module, especially for a pay television system, as well as to a method of controlling the transfer of scrambled information.
BACKGROUND OF THE INVENTION A pay television descrambling system is composed of a receiver and a security module. This module may be detachable or fixed. The purpose of the receiver is to descramble the signals received. The main purpose of the security module is to control the operation by verifying the descrambling authorization and by providing, as required, the information necessary for operating the descrambling module, for example by providing descrambling vectors, also called control words.
The existing systems use receivers which interrogate their security modules, and the latter reply by providing the information necessary for descrambling. At a given time, for the same transmitted broadcast, all the security modules reply with the same information.
Because the information flows between the security module and the receiver at a low rate (of about 20 to 30 bytes/s), defrauders may use this information in order to broadcast it publicly, for example via the Internet.
Such a system is described in the document "DVD Conditional Access" written by David Cutts in the journal called "Electronics Communication Engineering Journal" of February 1997. It is described a standardized system to unscramble audio and video streams coming from different service providers. The security module, called CA (Conditional Access) is in charge of delivering the control words CW. This module can additionally uses a smart card (SM) for the descrambling function. Once the information are descrambled in the CA module, the control words CW are returned in the decoder for obtaining the uncoded information.
-2- In a prior publication entitled "Conditional Access Broadcasting:Datacare 2, an Over-Air Enabled System for General Purpose Data Channels", published on August 1s 1988 in the journal BBC Research and Development Report No 10, it is described an independent module (Conditional Access Module) in charge of receiving and decrypting the information necessary for the descrambling. This module manages the key dedicated to the system and delivers the control words necessary for the descrambling of the video broadcasts. In this type of module, once the control words are decrypted, they are transmitted uncoded to the unit in charge of the descrambling.
~The problem then arises of how to make a receiver and a security module interdependent so that: the given security module can be used only in the receiver for which the said security module was intended; the information stream exchanged between the security module :and the receiver is unique. This uniqueness prevents the public o,**.broadcasting of this stream from allowing other receivers to work without the security module provided for this purpose.
C:.ili Any discussion of documents, acts, materials, devices, articles or the like which has been included in the present specification is solely for the purpose of providing a context for the present invention. It is not to be taken as an admission that any or all of these matters form part of the prior art base or were common general knowledge in the field relevant to the present invention as it existed in Australia before the priority date of each claim of this application.
Summary of the Invention According to a first aspect, the present invention is a Pay-TV reception system comprising a receiver connected to security means, this receiver receiving descrambling information from the security means, characterised in that at least some of the information sent from the security means to the receiver are encrypted by a unique and constant encryption key for the set V .15 formed by at least one receiver and the security means.
In a first embodiment, the Pay-TV reception system is preferably characterised in that the unique encryption key is common to a group of receivers. Still further, the reception system can be characterised in that at least some of the information sent from the receiver to the security means is encrypted by a unique and constant encryption key for the set formed by at least one receiver and the security means.
i In a still further embodiment, the Pay-TV reception system can be characterised in that the receiver includes a personal number which may be written in the security means, it being possible for the said receiver to verify at any time the conformity of this personal number written in the said security means.
In yet another embodiment, the Pay-TV reception system can be characterised in that the personal number comprises a part specific to a group of receivers and a part specific to one receiver and in that the conformity of the matching is verified on the part specific to the group of receivers.
In a still further embodiment, the Pay-TV reception system can be characterised in that the receiver includes a control unit and in that the security means consist of a detachable security module in which the confidential information and/or the information necessary for the operation of the control unit is stored.
In another embodiment, the security means can comprise a detachable descrambling security module comprising a control unit and a security unit, these units being responsible for descrambling and for authorising the video information.
o.e.
In a further aspect, the present invention is a Pay-TV reception system :comprising a receiver connected to security means, this receiver receiving o°descrambling information from the security means, characterised in that these 15 security means comprise a detachable security module and a detachable descrambling module which includes a control unit and in that at least some of the confidential information and/or of the information necessary for the operation of the control unit is encrypted before being sent to the detachable descrambling module by the detachable security module by means of a unique S 20 and constant encryption key for the set formed by the detachable descrambling module and the detachable security module.
p In this aspect, the Pay-TV reception system can be characterised in that at least some of the information sent from the detachable descrambling module 25 to the security module is encrypted by a unique and constant encryption key for the set formed by the detachable descrambling module and the detachable security module.
In another embodiment of this aspect, the detachable descrambling module includes a personal number which may be written in the detachable security module, it being possible for the said detachable descrambling module to verify at any time the conformity of this personal number written in the said detachable security module.
Still further, the personal number can comprise a part specific to a group of detachable descrambling modules and a part specific to one detachable descrambling module and in that the conformity of the matching is verified on the part specific to the group of detachable descrambling modules.
In a further embodiment of this aspect, the system can be characterised in that at least some of the information sent from the receiver to the detachable descrambling module is encrypted by a unique and constant encryption key for the set formed by the receiver and the detachable descrambling module.
In another embodiment of this aspect, the Pay-TV reception system can be characterised in that at least some of the information sent from the detachable descrambling module to the receiver is encrypted by a unique and constant encryption key for the set formed by the receiver and the detachable 15 descrambling module.
The receiver can include a personal number which may be written in the :detachable descrambling module, it being possible for the said receiver to verify at any time the conformity of this personal number written in the said S 20 detachable descrambling module.
In a still further aspect, the present invention is a method of controlling the transmission of information in a Pay-TV reception system between a receiver and security means, these security means sending to the receiver .i 25 descrambling information allowing the decryption of the video and audio signals, characterised in that at least one unique encryption key is stored, on the one hand, in the receiver and, on the other hand, in the security means and in that the information transmitted between the receiver and the security means is encrypted and decrypted by means of at least one of the said unique and constant encryption key for the set formed by the receiver and the security means.
In this aspect, the method can be characterised in that a number personal to the receiver is written in the security means during an initialisation operation and in that the receiver may check at any time the conformity of this personal number written in the said security means.
In a still further aspect, the present invention is a detachable security module intended to be connected to a receiver as part of a Pay-TV reception system, which includes at least one non-volatile memory intended for storing the confidential data and/or the data necessary for operating the descrambling system and the means of transmission with the receiver, characterised in that this detachable security module includes means for encrypting the transmission and in that this memory also includes at least one encryption key which acts on the means for encrypting the transmission, said encryption key being unique and constant for the set formed by the receiver and the detachable security module.
In a still further aspect, the present invention is a detachable q descrambling module being part of a Pay-TV reception system, comprising a control unit, first means of transmission with a detachable security module, 15 second means of transmission with a receiver, and a non-volatile memory, characterised in that it includes first encryption means and in that this memory includes at least one encryption key which acts on the first encryption means intended for encrypting the transmission of the first transmission means, said encryption key being unique and constant for the set formed by the detachable security means and the detachable descrambling module.
In an embodiment of this aspect, the module can be characterised in that it includes second encryption means and in that this memory includes at least one encryption key which acts on the second encryption means intended for 25 encrypting the transmission of the second transmission means, said encryption key being unique and constant for the set formed by the receiver and the detachable descrambling module.
In a still yet further aspect, the present invention is a pay television descrambling receiver comprising means of transmission to security means, as well as a non-volatile memory, characterised in that it includes means for encrypting/decrypting the transmission from and to the security means and in that this memory includes at least one encryption key which acts on the means for encrypting/decrypting the transmission, said encryption key being unique and constant for the set formed by the security means and the receiver.
The proposed solution to the above mentioned problem uses at least one encryption key specific to the receiver. This (or these) key(s) is (are) called a matching key. At least one of the keys is different for each receiver. This (or these) key(s) is (are) installed in the non-volatile memory of the receiver, either during the manufacture of the said receiver, or at a subsequent step. The receiver provides no means of access to this (or these) key(s) to the external world.
One possible means of programming this key into the security module is to use the central information system which manages the group of receivers and which can embed, in the video transmission stream, information for programming this key into the secret non-volatile memory of the security modules. The formatting of this procedure is, of course, kept secret.
e o* e -3- When transferring confidential information and/or information necessary for the operation of the system from the security module to the receiver (typically, control words, but other information may be thus transferred), the security module encrypts this information using one or more unique matching keys common to the single receiver/security module pair. Any method of encryption can be used provided the security module knows it, and the receiver knows the corresponding method of decryption.
Once this information has been received by the receiver, it is then decrypted by the said receiver using the known method of decryption and the matching key stored in its non-volatile memory. The said information is then uncoded information and can be used by the said receiver.
The invention therefore proposes a system for controlling the transmission of information between a receiver and a security module, especially for a pay television system, in which the transmitted information is encrypted and decrypted by means of at least one unique encryption key stored, on the one hand, in the receiver and, on the other hand, in the security module.
The invention also relates to a system for descrambling scrambled information and to a pay television system comprising a transmission control system.
Moreover, the invention relates to a method of controlling the transmission of information between a receiver and a security module, especially for a pay television system, characterized in that at least one unique matching key is stored, on the one hand, in the receiver and, on the other hand, in the security module and in that the information transmitted between the receiver and the security module is encrypted and decrypted by means of at least one said unique encryption key.
This solution according to the invention solves the problem posed. This is because: a security module inserted into a receiver other than that for which the said security module has been matched will provide this other receiver with a stream of confidential information and/or of information necessary for the operation of the system which is encrypted with a key that does not correspond to that used for decrypting it. The result is therefore unusable; -4a stream of confidential information and/or of information necessary for the operation of the system coming from a security module cannot be distributed to several receivers. Only the receiver matched with the card providing this stream of confidential and/or necessary information is able to decrypt the said stream successfully.
The system may comprise a mechanism for verifying the matching procedure. The central information system may write a number, personal to the receiver, in the security module matched with the said receiver, for example a number generated randomly by the latter, or may simply use its serial number. One means open to the receiver is to freely verify this personal number written in the security module and to compare it with that stored in its non-volatile memory.
This mechanism has the advantage of not using improper data.
The result of encryption followed by decryption by a different key usually provides a pseudo-random result. If the result is not recognized as being false and if this result is used as it is, this could result in the receiver or the equipment connected to it being damaged.
Certain types of receivers have a detachable descrambling module. This module is responsible for a number of operations, among which is the operation of descrambling the signals received. Confidential information is then transferred between the detachable security module and this detachable descrambling module. The mechanism of encryption of the communication, described above, between a receiver and a security module is then transferred, as it is, between the detachable security module and the detachable descrambling module.
Likewise, the method of matching, described above, between the security module and the receiver is then transferred, as it is, between the detachable security module and the detachable descrambling module.
Descrambled signals are then transferred between the detachable descrambling module and the receiver. The mechanism of encrypting the communication, along with the mechanism of matching, described above, between the security module and the receiver, is then transferred, as it is, between the receiver and the detachable descrambling module.
The functions provided by the detachable descrambling module and the detachable security module may be carried out by a single module, called a detachable descrambling-security module. The matching mechanism described above is then transferred, as it is, between the detachable descrambling-security module and the receiver.
In all the cases described above, the matching key or keys may be used to encrypt a stream of confidential data and/or of data necessary for operating the system in the opposite direction, by reversing, respectively: the receiver and the detachable security module; the detachable descrambling module and the detachable security module; the receiver and the detachable descrambling module; the receiver and the detachable descrambling-security module.
In all cases where a matching key is specific to one item of equipment (a receiver or a detachable module), the same principles apply to the use of a matching key (or several matching keys) specific to a group of items of equipment.
BRIEF DESCRIPTION OF THE FIGURES Figure 1 illustrates a configuration employing a receiver and a detachable security module.
Figure 2 illustrates a configuration employing a receiver, a detachable descrambling module and a detachable security module.
Figure 3 illustrates a configuration employing a receiver and a detachable descrambling-security module.
DETAILED DESCRIPTION The receiver A in Figure 1 receives a stream of scrambled video information 1 from a source such as a satellite receiver or by cable. This stream, of the order of several megabits per second, is shaped in the receiver A and then transmitted to a control unit B which is responsible for -6the descrambling and for managing the authorization for access to the scrambled video information. To do this, this control unit B periodically interrogates the detachable security module C (channel 3) which replies to the latter with a stream of confidential data and/or of data necessary for the operation of the control unit B (channel These exchanges take place at low rates and can be easily processed by the microprocessors of smart cards available on the market. According to the invention, the detachable security module C comprises at least one encryption key K in a non-volatile memory which encrypts the confidential data and/or the data necessary for operation of the control unit B (channel 4) towards the receiver A. This key K is unique to the receiver A and written to the detachable security module C, making the information stream 4 unique to this system. The public broadcasting of this information 4 will no longer be of any use to other receivers as, in the case of the latter, since they are not in possession of the same key K, the information stream is completely incomprehensible.
By means of the information 4, the control unit B can recover the descrambled video signal 2, this being processed and then transmitted in standard form (PAL, SECAM, NTSC) to the video monitor.
A variant of the invention employs encryption, of the same kind, of the information 3 sent to the detachable security module C either using the same key K or using a different key J, which is unique and specific to the system formed by the receiver A and the detachable security module C. Thus, any attempt to recover the key K from the information stream 4 is made much more difficult.
Figure 2 illustrates a variant using a detachable descrambling module D which incorporates the control unit B. In this case, the scrambled video stream 1 is shaped by the receiver A and sent to the detachable descrambling module D. The mode of operation described in the case of Figure 1 between the receiver A and the detachable security module C is this time applied to the conversation between the detachable descrambling module D and the detachable security module C. The key K is written in a secret part of the detachable descrambling module D instead of the receiver A. Thus, the information provided by the detachable security module C to the detachable descrambling module D is encrypted and therefore of no value to another detachable descrambling module D.
-7- It may thus be seen that the information sent to the receiver A consists of a stream of descrambled video information 6 which can be readily exploited, for example for illicit copies. In one variant of the invention, the stream 6 is encrypted in the detachable descrambling module D before being sent to the receiver A for descrambling by the decrypting unit This operation is carried out using a key K' specific only to the receiver A/detachable descrambling module D system.
Consequently, the information stream 6 no longer has any meaning and can be understood only by the receiver A having the same key K'.
The receiver A may add, to the scrambled video stream 1, control information intended for the detachable descrambling module D. In order to prevent this information from being public and from opening a door to understanding the encryption mechanism, this information is encrypted by the encryption unit E in order to obtain a scrambled video stream 6 containing encrypted control information.
Figure 3 illustrates a variant of the invention in which the detachable security module is incorporated into a detachable descrambling-security module F. The function of this module is to descramble and to manage the authorization of the video signals received by the receiver A. According to the invention, this module includes a unique encryption key specific to the receiver A and written in this detachable descrambling-security module F. Likewise, the descrambled video stream 6 is encrypted by this key and sent in this form to the receiver A. The latter, by means of the decryption unit E' and by using the same unique key, will be able to recover the uncoded video signal.
By analogy with the operation described in relation to Figure 2, the control information contained in the scrambled video stream 1 may be encrypted by means of a unique encryption key by the unit E before it is sent to the detachable descrambling-security module F.
In all the examples described in relation to Figures 1 to 3, the matching may be checked. In the case of Figure 1, the receiver A writes a personal number, for example its serial number, in the detachable security module C. Thus, the receiver can at any instant verify that the detachable security module C is indeed that which is intended for it. In the context of the example illustrated in Figure 2, the check may be made at two levels, -8namely a first level between the detachable descrambling module D and the detachable security module C and a second level between the detachable descrambling module D and the receiver A. This second level is particularly important if the unscrambled information 6 sent to the receiver A is encrypted.
In the solution shown in Figure 3, the matching is checked between the receiver A and the detachable descrambling-security module
F.
In one embodiment of the invention, the receiver A is an MPEG decoder using control words (information necessary for descrambling the signal) in order to descramble the video signal. These control words are provided by the detachable security module C. This module, for example a smart card, includes a non-volatile memory for storing them.
In one embodiment of the invention, the detachable descrambling module D is a PCMCIA-type card which includes an MPEG decoder (control unit B).
In one embodiment of the invention, the detachable descrambling-security module F is produced in the form of a smart card which incorporates an MPEG decoder and a security module C'.
In one embodiment of the invention, the unique encryption key K is common to a group of receivers. This possibility is advantageous, for example in a school having several receivers to which the same detachable security module is applied depending on the requirements.
Likewise, several detachable security modules include the same encryption key in order to be able to be placed in any one of the receivers in the group. In this case, the matching check is carried out on a number which is no longer specific to one receiver but to a group of receivers. A combination may be produced with a number composed of two parts, one part defining the group and the other the receiver. The uniqueness of the personal number is respected, the matching conformity test then being carried out on more than just the group part of this number.

Claims (17)

1. Pay-TV reception system comprising a receiver connected to security means, this receiver receiving descrambling information from the security means, characterised in that at least some of the information sent from the security means to the receiver are encrypted by a unique and constant encryption key for the set formed by at least one receiver and the security means.
2. Pay-TV reception system according to claim 1, characterised in that the unique encryption key is common to a group of receivers.
3. Pay-TV reception system according to claim 1 or 2, characterised in that at least some of the information sent from the receiver to the security means is encrypted by a unique and constant encryption key for the set formed by at least one receiver and the security means.
4. Pay-TV reception system according to any one of claims 1 to 3, 15 characterised in that the receiver includes a personal number which may be written in the security means, it being possible for the said receiver to verify at any time the conformity of this personal number written in the said security o means. Pay-TV reception system according to claim 4, characterised in that the personal number comprises a part specific to a group of receivers and a part specific to one receiver and in that the conformity of the matching is verified on the part specific to the group of receivers.
6. Pay-TV reception system according to any one of claims 1 to characterised in that the receiver includes a control unit and in that the security 25 means consist of a detachable security module in which the confidential information and/or the information necessary for the operation of the control unit is stored.
7. Pay-TV reception system according to any one of claims 1 to characterised in that the security means comprise a detachable descrambling security module comprising a control unit and a security unit, these units being responsible for descrambling and for authorising the video information.
8. Pay-TV reception system comprising a receiver connected to security means, this receiver receiving descrambling information from the security means, characterised in that these security means comprise a detachable security module and a detachable descrambling module which includes a 7 c control unit and in that at least some of the confidential information and/or of the information necessary for the operation of the control unit is encrypted before being sent to the detachable descrambling module by the detachable security module by means of a unique and constant encryption key for the set formed by the detachable descrambling module and the detachable security module.
9. Pay-TV reception system according to claim 8, characterised in that at least some of the information sent from the detachable descrambling module to the security module is encrypted by a unique and constant encryption key for the set formed by the detachable descrambling module and the detachable security module.
10. Pay-TV reception system according to claim 8 or 9, characterised in that the detachable descrambling module includes a personal number which may .i :be written in the detachable security module, it being possible for the said detachable descrambling module to verify at any time the conformity of this 15is personal number written in the said detachable security module.
11. Pay-TV reception system according to claim 10, characterised in that the personal number comprises a part specific to a group of detachable descrambling modules and a part specific to one detachable descrambling module and in that the conformity of the matching is verified on the part specific to the group of detachable descrambling modules.
12. Pay-TV reception system according to any one of claims 9 to 11, characterised in that at least some of the information sent from the receiver to the detachable descrambling module is encrypted by a unique and constant S:°o encryption key for the set formed by the receiver and the detachable o 25 descrambling module.
13. Pay-TV reception system according to any one of claims 9 to 12, characterised in that at least some of the information sent from the detachable descrambling module to the receiver is encrypted by a unique and constant encryption key for the set formed by the receiver and the detachable descrambling module.
14. Pay-TV reception system according to either of claims 12 and 13, characterised in that the receiver includes a personal number which may be written in the detachable descrambling module, it being possible for the said receiver to verify at any time the conformity of this personal number written in the said detachable descrambling module. Method of controlling the transmission of information in a Pay-TV reception system between a receiver and security means, these security means sending to the receiver descrambling information allowing the decryption of the video and audio signals, characterised in that at least one unique encryption key is stored, on the one hand, in the receiver and, on the other hand, in the security means and in that the information transmitted between the receiver and the security means is encrypted and decrypted by means of at least one of the said unique and constant encryption key for the set formed by the receiver and the security means.
16. Method according to claim 15, characterised in that a number personal to the receiver is written in the security means during an initialisation operation *.and in that the receiver may check at any time the conformity of this personal number written in the said security means. Detachable security module intended to be connected to a receiver as 15 part of a Pay-TV reception system, which includes at least one non-volatile memory intended for storing the confidential data and/or the data necessary for operating the descrambling system and the means of transmission with the receiver, characterised in that this detachable security module includes means for encrypting the transmission and in that this memory also includes at least one encryption key which acts on the means for encrypting the transmission, said encryption key being unique and constant for the set formed by the receiver and the detachable security module.
18. Detachable descrambling module being part of a Pay-TV reception °-system, comprising a control unit, first means of transmission with a detachable 25 security module, second means of transmission with a receiver, and a non- volatile memory, characterised in that it includes first encryption means and in that this memory includes at least one encryption key which acts on the first encryption means intended for encrypting the transmission of the first transmission means, said encryption key being unique and constant for the set formed by the detachable security means and the detachable descrambling module.
19. Detachable descrambling module according to claim 18, characterised in that it includes second encryption means and in that this memory includes at least one encryption key which acts on the second encryption means intended for encrypting the transmission of the second transmission means, said encryption key being unique and constant for the set formed by the receiver and the detachable descrambling module. Pay television descrambling receiver comprising means of transmission to security means, as well as a non-volatile memory, characterised in that it includes means for encrypting/decrypting the transmission from and to the security means and in that this memory includes at least one encryption key which acts on the means for encrypting/decrypting the transmission, said encryption key being unique and constant for the set formed by the security means and the receiver. 9999e
99. Dated this twenty-first day of June 2002 NagraCard S.A. Patent Attorneys for the Applicant: F B RICE CO
AU35297/99A 1998-05-07 1999-05-06 Mechanism for matching a receiver with a security module Ceased AU751436B2 (en)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
IB9800681 1998-05-07
WO98/00681 1998-05-07
PCT/IB1999/000821 WO1999057901A1 (en) 1998-05-07 1999-05-06 Mechanism for matching a receiver with a security module

Publications (2)

Publication Number Publication Date
AU3529799A AU3529799A (en) 1999-11-23
AU751436B2 true AU751436B2 (en) 2002-08-15

Family

ID=11004712

Family Applications (1)

Application Number Title Priority Date Filing Date
AU35297/99A Ceased AU751436B2 (en) 1998-05-07 1999-05-06 Mechanism for matching a receiver with a security module

Country Status (37)

Country Link
EP (1) EP1078524B2 (en)
JP (1) JP2002514862A (en)
KR (1) KR100607314B1 (en)
CN (1) CN1181684C (en)
AP (1) AP2000002000A0 (en)
AR (1) AR015072A1 (en)
AT (1) ATE222441T1 (en)
AU (1) AU751436B2 (en)
BG (1) BG64137B1 (en)
BR (1) BRPI9909710B1 (en)
CU (1) CU22758A3 (en)
CZ (1) CZ301694B6 (en)
DE (1) DE69902527T3 (en)
DK (1) DK1078524T4 (en)
EA (1) EA002703B1 (en)
EE (1) EE200000639A (en)
ES (1) ES2181418T5 (en)
GE (1) GEP20032936B (en)
HR (1) HRP20000753A2 (en)
HU (1) HU224950B1 (en)
ID (1) ID26103A (en)
IL (2) IL139364A0 (en)
IS (1) IS5648A (en)
MY (1) MY124673A (en)
NO (1) NO331328B1 (en)
NZ (1) NZ507807A (en)
OA (1) OA12034A (en)
PL (1) PL193427B1 (en)
PT (1) PT1078524E (en)
SI (1) SI1078524T1 (en)
SK (1) SK16492000A3 (en)
TR (1) TR200003258T2 (en)
TW (1) TW412909B (en)
UA (1) UA60366C2 (en)
WO (1) WO1999057901A1 (en)
YU (1) YU49340B (en)
ZA (1) ZA200006172B (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8336106B2 (en) 2007-03-06 2012-12-18 Nagravision S.A. Method to control the access to conditional access audio/video content
US10708634B2 (en) 2011-07-01 2020-07-07 Nagravision S.A. Method for playing repeatable events on a media player

Families Citing this family (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6959090B1 (en) 2000-11-20 2005-10-25 Nokia Corporation Content Protection scheme for a digital recording device
US7224797B2 (en) * 2001-08-17 2007-05-29 Koninklijke Philips Electronics N.V. System and method for hybrid conditional access for receivers of encrypted transmissions
WO2003024104A1 (en) 2001-09-13 2003-03-20 Nds Limited Hacking prevention system
PT1377035E (en) * 2002-06-28 2010-04-15 Nagravision Sa Updating method for security keys in a television decoder
TW200421811A (en) * 2002-09-24 2004-10-16 Nagracard Sa Multiple pairing control method
US7224310B2 (en) 2002-11-20 2007-05-29 Nagravision S.A. Method and device for the recognition of the origin of encrypted data broadcasting
TW200509700A (en) 2003-06-20 2005-03-01 Nagravision Sa Decoder and system for processing pay-TV data and process for managing at least two decoders
FR2866773B1 (en) * 2004-02-20 2006-04-28 Viaccess Sa METHOD FOR MATCHING AN NUMBER N OF RECEIVER TERMINALS WITH A NUMBER M OF CONDITIONAL ACCESS CONTROL CARDS
US8528106B2 (en) 2004-02-20 2013-09-03 Viaccess Process for matching a number N of reception terminals with a number M of conditional access control cards
FR2866772B1 (en) * 2004-02-20 2006-04-28 Viaccess Sa METHOD FOR MATCHING A RECEIVER TERMINAL WITH A PLURALITY OF ACCESS CONTROL CARDS
FR2883683B1 (en) * 2005-03-23 2007-07-06 Viaccess Sa METHOD FOR MATCHING BETWEEN A TERMINAL AND A SECURITY PROCESSOR, SYSTEM AND COMPUTER PROGRAM FOR IMPLEMENTING THE METHOD
EP1742474A1 (en) * 2005-07-07 2007-01-10 Nagracard S.A. Method and device to control access to enciphered data
US7992175B2 (en) 2006-05-15 2011-08-02 The Directv Group, Inc. Methods and apparatus to provide content on demand in content broadcast systems
FR2902585B1 (en) * 2006-06-14 2008-09-26 Viaccess Sa METHODS OF BROADCASTING AND RECEIVING A MULTI-MEDIA PROGRAM, NETWORK HEAD, TERMINAL, RECEIVER AND SECURITY PROCESSOR THEREFOR
FR2905215B1 (en) * 2006-08-23 2009-01-09 Viaccess Sa METHOD OF TRANSMITTING COMPLEMENTARY DATA TO A RECEPTION TERMINAL
FR2921175A1 (en) * 2007-09-14 2009-03-20 Sagem Securite Sa Chip card i.e. contact chip card, for use as e.g. bank card, has antenna for exchanging data with external device, RAM including storage zone dedicated for exchanged data, and processing unit for securing zone and storing data in zone
ES2351776T3 (en) 2008-02-11 2011-02-10 Nagravision S.A. METHOD OF UPDATE AND MANAGEMENT OF AN APPLICATION OF AUDIOVISUAL DATA PROCESSING INCLUDED IN A MULTIMEDIA UNIT THROUGH A CONDITIONAL ACCESS MODULE.
EP2129116A1 (en) 2008-05-29 2009-12-02 Nagravision S.A. Unit and method for securely processing audio/video data with controlled access
FR2940691B1 (en) * 2008-12-31 2011-02-25 Viaccess Sa METHODS OF TRANSMITTING, RECEIVING AND IDENTIFYING, SECURITY PROCESSOR, AND INFORMATION RECORDING MEDIUM FOR SUCH METHODS.
US8782417B2 (en) 2009-12-17 2014-07-15 Nagravision S.A. Method and processing unit for secure processing of access controlled audio/video data
EP2337347A1 (en) 2009-12-17 2011-06-22 Nagravision S.A. Method and processing unit for secure processing of access controlled audio/video data
EP2373019A1 (en) 2010-03-29 2011-10-05 Nagravision S.A. Secure descrambling of an audio / video data stream
BR112013012356B1 (en) 2010-11-19 2021-03-09 Nagravision S.A. method to detect cloned software
PL2466505T3 (en) 2010-12-01 2013-10-31 Nagravision Sa Method for authenticating a terminal
WO2012072772A1 (en) 2010-12-02 2012-06-07 Nagravision S.A. System and method to record encrypted content with access conditions
EP2645729A1 (en) 2012-03-30 2013-10-02 Nagravision S.A. Security device for Pay-TV receiver/decoder
US9197312B2 (en) 2013-03-11 2015-11-24 Nagravision S.A. Near field communication system in a local network
EP2802152B1 (en) 2013-05-07 2017-07-05 Nagravision S.A. Method for secure processing a stream of encrypted digital audio / video data
EP2827601A1 (en) 2013-07-19 2015-01-21 Nagravision S.A. Method and device for protecting decryption keys of a decoder
EP3293979A1 (en) * 2016-09-09 2018-03-14 Nagravision S.A. Host rendering device tagging by a portable multimedia processing device
CN108833944A (en) * 2018-07-09 2018-11-16 中国联合网络通信集团有限公司 Method of video distribution
DE102021101101A1 (en) 2021-01-20 2022-07-21 zereOS GmbH Adapters and methods for affecting or diagnosing a device

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1997038530A1 (en) * 1996-04-03 1997-10-16 Digco B.V. Method for providing a secure communication between two devices and application of this method

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4484027A (en) * 1981-11-19 1984-11-20 Communications Satellite Corporation Security system for SSTV encryption
JPS6016082A (en) * 1983-07-07 1985-01-26 Sony Corp Transmission system of scramble television signal
US5029207A (en) † 1990-02-01 1991-07-02 Scientific-Atlanta, Inc. External security module for a television signal decoder
US5204900A (en) * 1991-03-04 1993-04-20 Pires H George Coding system for descrambling video
JPH07283809A (en) * 1994-04-08 1995-10-27 Mitsubishi Corp Ciphering key system
KR100194790B1 (en) * 1996-06-10 1999-06-15 정선종 Conditional Conditional Access System and Conditional Conditional Access Service Processing Method Using It
ID23916A (en) † 1997-10-02 2000-05-25 Canal Plus Sa METHODS AND DEVICES FOR TRANSPORTATION OF CODE FLOWS

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1997038530A1 (en) * 1996-04-03 1997-10-16 Digco B.V. Method for providing a secure communication between two devices and application of this method

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
CUTTS D.J DVB CONDIT ACC, ELEC COM ENG J V9 N1 1997 PP21-27 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8336106B2 (en) 2007-03-06 2012-12-18 Nagravision S.A. Method to control the access to conditional access audio/video content
US10708634B2 (en) 2011-07-01 2020-07-07 Nagravision S.A. Method for playing repeatable events on a media player

Also Published As

Publication number Publication date
WO1999057901A1 (en) 1999-11-11
EA200001072A1 (en) 2001-04-23
OA12034A (en) 2006-05-02
HUP0301133A3 (en) 2003-09-29
BG104905A (en) 2001-06-29
NO331328B1 (en) 2011-11-28
BR9909710A (en) 2000-12-26
DK1078524T3 (en) 2002-11-25
YU49340B (en) 2005-07-19
SI1078524T1 (en) 2002-12-31
DE69902527T3 (en) 2009-12-17
PL193427B1 (en) 2007-02-28
ID26103A (en) 2000-11-23
ZA200006172B (en) 2001-05-14
IL139364A0 (en) 2001-11-25
BRPI9909710B1 (en) 2016-02-10
ES2181418T3 (en) 2003-02-16
EP1078524B2 (en) 2009-06-17
PT1078524E (en) 2002-12-31
EP1078524A1 (en) 2001-02-28
AR015072A1 (en) 2001-04-11
CZ20003968A3 (en) 2001-02-14
ES2181418T5 (en) 2009-11-05
AP2000002000A0 (en) 2000-12-31
ATE222441T1 (en) 2002-08-15
PL343941A1 (en) 2001-09-10
IL139364A (en) 2008-11-26
DE69902527T2 (en) 2003-05-08
BG64137B1 (en) 2004-01-30
YU65600A (en) 2002-08-12
TW412909B (en) 2000-11-21
EP1078524B1 (en) 2002-08-14
DK1078524T4 (en) 2009-10-05
HRP20000753A2 (en) 2001-10-31
HU224950B1 (en) 2006-04-28
MY124673A (en) 2006-06-30
DE69902527D1 (en) 2002-09-19
HUP0301133A2 (en) 2003-08-28
UA60366C2 (en) 2003-10-15
AU3529799A (en) 1999-11-23
NZ507807A (en) 2002-11-26
EA002703B1 (en) 2002-08-29
IS5648A (en) 2000-09-29
SK16492000A3 (en) 2001-05-10
JP2002514862A (en) 2002-05-21
EE200000639A (en) 2002-04-15
KR100607314B1 (en) 2006-07-28
CN1314047A (en) 2001-09-19
NO20005533L (en) 2000-11-02
KR20010043258A (en) 2001-05-25
NO20005533D0 (en) 2000-11-02
CN1181684C (en) 2004-12-22
TR200003258T2 (en) 2001-03-21
CZ301694B6 (en) 2010-05-26
CU22758A3 (en) 2002-02-28
GEP20032936B (en) 2003-03-25

Similar Documents

Publication Publication Date Title
AU751436B2 (en) Mechanism for matching a receiver with a security module
US7577846B2 (en) Mechanism of matching between a receiver and a security module
US6385317B1 (en) Method for providing a secure communication between two devices and application of this method
AU755892B2 (en) Method and apparatus for secure communication of information between a plurality of digital audiovisual devices
US5018197A (en) Secure video decoder system
AU748518B2 (en) Method and apparatus for encrypted data stream transmission
CA2055132C (en) Apparatus and method for upgrading terminals to maintain a secure communication network
AU754015B2 (en) Method and apparatus for recording of encrypted digital data
US8666072B2 (en) Method and a system for receiving a multimedia signal, a cryptograophic entity for said reception method and system, and a method and a black box for producing said cryptographic entity
JPH10164053A (en) Verification method/system for data by scrambling
KR101083200B1 (en) Portable security module pairing
JP4521392B2 (en) Pay television systems associated with decoders and smart cards, rights revocation methods in such systems, and messages sent to such decoders
GB2377348A (en) Security unit for encrypted signal transmission
CA2250833C (en) Method for providing a secure communication between two devices and application of this method
MXPA00010684A (en) Mechanism for matching a receiver with a security module
ZA200100325B (en) Method and apparatus for secure communication of information between a plurality of digital audiovisual devices.
TH40488A3 (en) Mechanisms for matching between receiver and safety module

Legal Events

Date Code Title Description
TC Change of applicant's name (sec. 104)

Owner name: NAGRACARD S.A.

Free format text: FORMER NAME: NAGRACARD S.A.

FGA Letters patent sealed or granted (standard patent)
MK14 Patent ceased section 143(a) (annual fees not paid) or expired