JP2014161043A - Multimedia access device registration system and method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a multimedia access device registration system and method.SOLUTION: A method is provided for enabling an access device to safely access contents from a content provider and preventing an imitated access device from accessing contents. When registering an access device to the content provider, the access device requests to an instructed authentication station a certificate including a public key of the content provider. Simultaneously with authentication of the certificate, the access device generates a key and exchanges this key with the content provider by using the public key. Thereafter, this key is used for subsequent safe communication between the access device and the content provider. Thus, since an imitated device cannot access this key, it cannot download contents from the content provider.

Description

  The present invention relates generally to content access devices such as digital receivers / decoders in broadcast / cable / satellite broadcasts, and more particularly to methods and systems for operating and registering such devices. Registration may occur as a matter at the subscription-based service provider.

  High value content (eg, audio, video, and multimedia content) is often distributed through subscription-based services. Subscription-based services can range from a single program to an entire channel or group of channels. A typical subscription-based content distribution system is digital video broadcast (DVB). When a DVB receiver (for example, a set-top unit or set-top box) is tuned to a DVB service (such as a satellite signal, a digital terrestrial signal, or a digital cable signal), the DVB receiver is conventionally multiplexed. In a program transport stream (MPTS), it can be physically tuned to a given repeater carrying many DVB services. The associated demultiplexer retrieves the various data streams related to the expected service through a digital filter. The DVB receiver then builds a single program transport stream (SPTS) from these various data streams and displays it using, for example, a television coupled to a DVB receiver / decoder. Process those streams.

  A system identifier or user credentials (eg, credit card information) can be stolen if secure subscription access cannot be provided for content that is traditionally carried by DVB networks. If the subscription cannot be made conveniently, consumer acceptance of the system may be limited. Failure to ensure proper subscription information can result in consumer issues and / or unauthorized access to content. Furthermore, if unauthorized access by a counterfeit consumer device cannot be prevented, unauthorized access to the content can also be provided. Any or all of these conditions can lead to service disruption, consumer dissatisfaction, and reduced service provider revenue.

  In view of the foregoing, there is a need for a method and apparatus that allows an access device to register to receive digital content from a content provider, particularly a subscription-based content provider. The method and apparatus according to the present invention provides access device registration to a content provider and subsequent secure communication between them while preventing imitation devices from accessing content from the content provider. to enable.

  The present invention provides a method that allows an access device to securely access content from at least a content provider and at the same time prevents imitation access devices from accessing such content. When registering an access device with a content provider, the access device requests a certificate with the content provider's public key in it from the indicated certificate authority. Simultaneously with certificate authentication, the access device generates a key and exchanges this key with the content provider using the public key. This key is then used for subsequent secure communications between the access device and the content provider. In this way, the imitated device cannot access this key and cannot download content from the content provider.

  In this regard, the present invention provides a method that allows an access device to access content that includes an audio / video program from a content provider, which includes a specific content provider. Receiving a certificate associated with the; authenticating the certificate to determine unique data associated with the particular content provider; generating a key for communicating with the particular content provider; Encrypting the key according to the unique data determined from the certificate, transmitting the encryption key to the specific content provider, requesting the content from the specific content provider, and from the specific content provider A step that decrypts the received content using the key. Including and up, the.

  The present invention also provides an apparatus for communicating with a content provider, the apparatus including a port for communicating with a plurality of content providers and a first therein for controlling operation of the apparatus. A memory storing a key and executable code; a signal output for coupling an output signal to a display device; and a processor coupled to the port, the memory and the signal output, wherein the device is a certificate from a certificate authority Request, authenticate the certificate received from the certificate authority, determine unique data associated with a particular content provider, and use the unique data associated with the particular content provider Encrypts and transmits a request for content to a specific content provider and is received from a specific content provider using that key Comprising a processor operative to decode the content, the.

  The present invention also provides a method for enabling an access device to access digital content from a content provider, the method comprising receiving authentication information associated with a particular content provider; Processing authentication information, determining unique data associated with a particular content provider contained in the authentication information, generating a key for communicating with the particular content provider, and a certificate Encrypting the key according to the unique data determined from the step, transmitting the encryption key to the specific content provider, requesting the content from the specific content provider, and using the key, Decrypting content received from a particular content provider; Including.

1 is a block diagram illustrating a system that includes several access devices that are communicatively coupled to a content provider in accordance with an aspect of the present invention. FIG. 6 is a flowchart illustrating an operation according to an aspect of the present invention. 6 is a flowchart illustrating an operation according to an aspect of the present invention. 6 is a flowchart illustrating an operation according to an aspect of the present invention. FIG. 4 illustrates a user interface suitable for use with an access device, according to one aspect of the invention. 6 is a flowchart illustrating an operation according to an aspect of the present invention. 6 is a flowchart illustrating an operation according to an aspect of the present invention. 6 is a flowchart illustrating an operation according to an aspect of the present invention. 6 is a flowchart illustrating an operation according to an aspect of the present invention. 6 is a flowchart illustrating an operation according to an aspect of the present invention. FIG. 6 is a block diagram illustrating a set-top unit according to an aspect of the present invention. FIG. 4 illustrates a user interface suitable for use with an access device, according to one aspect of the invention. FIG. 4 illustrates a user interface suitable for use with an access device, according to one aspect of the invention.

  An understanding of the present invention is described by way of non-limiting example only, and by considering the following detailed description of a preferred embodiment, which is to be interpreted in connection with the accompanying drawings. It will be easy. In the drawings, like numerals indicate like parts.

  It should be understood that the drawings and descriptions of the present invention have been simplified to illustrate elements that are relevant to a clear understanding of the present invention, while at the same time providing a general set for clarity. -Many other elements found in top unit systems and how to make and use these elements have been deleted. Those skilled in the art will recognize that other elements are desired and / or required to practice the present invention. However, since these elements are well known in the art, a detailed discussion of such elements is not provided herein.

  In accordance with one aspect of the present invention, a system and method for providing secure subscription-based services to access devices such as consumer set-top units, personal video recorders, or other similar digital terminal devices. Can be provided. Such systems and methods inhibit illegal imitation of consumer devices while providing a viable solution for providing high value content (eg, audio / video / multimedia content) in a network environment. Will help to do.

  Referring now to FIG. 1, a block diagram of a system 100 according to one aspect of the present invention is shown. The system 100 includes a plurality of subscriber devices 110 that are communicatively coupled to a single content provider 120. Those skilled in the art will appreciate that many access devices 110 and several content providers 120 may comprise the system 100. Further, any device 110 may be communicatively coupled to one or more content providers 120.

  Consumers who have purchased or otherwise acquired access device 110 typically register the device and subscribe to the provision of content from content provider 120. Measures may be taken to disable unauthorized access to information transmitted between the subscribed device 110 and the content provider 120. Measures may also be taken to ensure that device requests for content from content provider 120 are granted before being achieved. This code may be automatically configured (rather than made configurable by the user) to mitigate the risk that the security code will be used on unauthorized devices. If the access device 110 is imitated, the imitation is such that both the original device and the imitated device prevent attempts to access content from the content provider 120 using a single account. May be defended against. Certificate based systems and security key refresh may be used in accordance with the present invention. Key refresh may be performed on an event basis (eg, content request) and / or a time basis (eg, periodic key updates).

  Referring now to FIG. 2, a process 200 for service provider verification or authentication by an access device is depicted in accordance with an aspect of the present invention. Before the consumer attempts to activate access device 110, the device may be provided with an electronic list of public keys (block 210), where each key is associated with a particular certificate authority. As one configuration, this list is provided before the user activates the access device, i.e. preloaded into the access device. Current certificate authorities suitable for use with the present invention include, for example, Entrust and Verisign. The list of public keys may be loaded into the memory of access device 110, for example, at the time of device manufacture or at the point of sale. The public key may be stored, for example, in the internal memory of the device or in a replaceable memory device such as a removable memory stick or card. As will be appreciated by those skilled in the art, since the public key is not secret, the stored list of keys may be secure, but need not be secure. A separate memory card containing the public key of one or more certificate authorities may be provided to the user of the access device 110 individually or to the device itself.

  When the user acquires the access device 110, the user connects the device to a display device, such as a television, to connect to receive programming such as satellite dish or cable, or even a telephone line or direct subscriber. It would be recommended to connect to a two-way communication network such as a line (DSL) or cable modem. In some cases, the connection for receiving the program can serve as a two-way communication network. Using the interactive network, device 110 requests a certificate from the selected content provider (block 220). An exemplary interface suitable for allowing a user to select a service provider is described in FIGS. Upon receiving the requested certificate (block 230), the device 110 authenticates the certificate (block 240), thereby ensuring that the device 110 can communicate with the desired content provider. .

  Referring to FIG. 3 in conjunction with FIG. 2, at the same time that content provider 120 receives a certificate request (block 220) transmitted by device 110 (block 310), content provider 120 may receive a certificate to be received by device 110. (Block 230) is transmitted (Block 320).

For example, a certificate often takes the form of a file that is used for authentication purposes. A digital certificate may be issued to each content provider 120 by a certificate authority (CA). For example, the CA may use the CA private key K _pri to encrypt a digital certificate C _s that includes the corresponding content provider's public key. In response to the user's selection of content provider 120, device 110 can contact the content provider and request a certificate C _s via the two-way communication network to begin the registration and subscription process. The communication network can support point-to-point communication between the device 110 and the content provider 120.

As already mentioned with respect to FIG. 2, upon receiving the certificate C _s (block 230), the requesting device 110 uses the corresponding one of the stored CA public keys K _pub to authenticate the certificate. Verification is made (block 240). Once the certificate is authenticated, the content provider's public key K _pub may be retrieved from the decrypted certificate C _s and trusted as authenticated. This public key K _pub can be used to securely transmit information to the corresponding content provider 120. This is because the content provider's private key K _pri is used to decrypt a message encrypted with K _pub .

  Also, referring now to FIG. 4, process flow 400 verifies the certificate in block 240 (FIG. 2), while device 110 obtains payment information (block 410) and encrypts the information (block 410). Block 420) indicates that the encrypted information is transmitted to the authenticated content provider 120 (block 430). FIG. 5 shows an exemplary user interface 500 suitable for obtaining payment information from a registered user. Interface 500 may be displayed to the user by a display device coupled to device 110. Interface 500 includes a data input portion 510, an accept portion 520, and a reject portion 530, which, in the illustrated case, takes the form of a text box. Using a conventional interface, such as a push button on device 110 or a remote control for device 110, the user may make an entry in portion 510 to provide billing information related to content subscription. Upon activation of the accepting portion 520, payment information may be encrypted (block 420) and sent to the selected content provider 120 (block 430).

  FIG. 6 shows a process 600 where the content provider 120 receives the transmitted payment information in addition to the identifier information (eg, serial number) of the device 110 (block 610) and decrypts the payment information (block 620). . Device 110 may then attempt to verify the decrypted billing information (block 630). If this information is verified (block 630), the device may be allowed to proceed with registration (block 640). If this information cannot be verified, a request for new billing information (block 650) may be sent to the transmission device 110. In response, the transmission device 110 can again perform the operations associated with blocks 410, 420, and 430.

As yet another example, the device 110 can encrypt the payment information using the retrieved content provider's public key K _pub , and the content provider 120 can use its private key K _pri. The received payment information can be decrypted. The content provider 120 can then process the decrypted payment information, such as referencing an initial fee to a credit card company depending on the decrypted payment information. The content provider 120 can inform the transmission device 110 that the payment information has been verified or accepted. The content provider 120 may also store verified payment information so that subsequent costs associated with the subscription can be handled when incurred.

  As a modification, the user may set up a subscriber account (including exchange of payment information) of the content provider 120 that is separate from the system 100. In such a case, the user optionally optionally provides account information to be transmitted to the selected content provider 120, such as an account number and personal identification number (PIN) for initiating key exchange, on the device 110. You can simply type in

Also referring now to FIG. 7, a key generation and transmission process 700 in accordance with an aspect of the present invention is illustrated. Once payment information is verified or accepted, device 110 may generate a key generated by any suitable algorithm, for example, which may take the form of a random number (block 710). In the operation shown in the figure, the device 110 encrypts the random number (block 720) and transmits the encrypted number to the content provider (block 730). The random number may be encrypted using the content provider's public key. As yet another example, device 110 may receive an indication from the selected content provider 120 that payment information has been verified. Thereby, the device 110 can generate a pseudo-random number K _d (eg, based on the system clock, serial number, and / or device status). The generated number K _d may then be encrypted using the content provider's public key K _pub (K _pub (K _d )). The encrypted result may then be transmitted to the content provider.

  Also referring now to FIG. 8, a process 800 in accordance with an aspect of the present invention is illustrated. Once the content provider 120 receives the encrypted random number (block 730) transmitted by the device 110 (block 810), the content provider 120 decrypts the number (block 820) and the number is sufficiently unique. (Block 830) and if so, accept a random number (block 850). If the content provider determines that the number is not sufficiently unique (block 830), the content provider requests the transmission device 110 to provide a new random number (block 840), which causes the device 110 to Again, the operations associated with blocks 710, 720, and 730 are performed. In response, the content provider again receives the encrypted random number (block 810), decrypts it (block 820), and again determines whether it is sufficiently unique (block 830). ).

As yet another example, the content provider 120 may decrypt the received random number encrypted with the public key K _pub using the secret key K _pri . The content provider then checks the decrypted random number K _d to confirm that there are no other sessions or other devices that currently use the same K _d . If so, the content provider 120 requests that the transmission device 110 generate, encrypt, and transmit another random number until a currently unused K _d is detected. Once a unique K _d is detected, the content provider accepts that K _d as the session key of the transmitting device, sets up a subscription account that stores K _d in association with a device identifier, eg, serial number, and Tell the transmission device to accept. Correspondingly, the device 110 stores the key K _d in a non-volatile secure memory.

Subsequent secure communications between the transmission device 110 and the content provider 120 may be encrypted using _Kd as the symmetric encryption / decryption key. For example, a content request sent from the transmission access device 110 to the content provider 120 may be encrypted using K _d, and content delivered from the provider 120 to the device 110 may be encrypted using K _d. May be used. Thus, at registration, a key is generated and exchanged between the access device and the content provider, and this key is used for subsequent secure communications between them. This method further prevents the imitation access device from receiving the program from the content provider, since the imitation access device does not have this key for secure communication with the content provider.

For security reasons, the shared secret key _Kd may also be changed or refreshed periodically, especially to prevent unauthorized counterfeiting attempts. As a modification, or as an additional form, a new key may be generated in response to each request for content access. Turning now to FIG. 9, a key update process 900 in accordance with an aspect of the present invention is illustrated. The content provider 120 or device 110 determines whether the shared key should be refreshed (block 910). If not, the device or provider may be waiting until a refresh is requested (block 940). For example, the device 110 or content provider 120 can wait for a given or predetermined time period or until a triggering event is detected. In any case, when a refresh is requested (block 910), a new random number is generated and encrypted (block 920). The encrypted number is then stored and transmitted to the other of device 110 and content provider 120. As shown in FIG. 10, upon receiving a new random number (block 1010), device 110 or provider 120 decrypts the new random number (block 1020) and stores the new random number in memory (block 1030). . A confirmation message encrypted using this new number is sent to the transmission device 110 or the provider 120.

As yet another example, according to one aspect of the invention, a new key may be negotiated using the current key. For example, a new key K _{d + 1} may be encrypted and transmitted from the corresponding content provider 120 to the corresponding access device 110 by using the key K _d on the point-to-point communication channel. . In this way, only one device 110 can access the key K _{d + 1} . Once the content provider 120 confirms that the key K _{d + 1} has been received and decrypted by the device 110, the content provider 120 and the device 110 can revoke the previous key K _d and no longer use this key. Do not accept or use for transactions. Furthermore, a new key K _{d + 1} may be generated by using the old key K _d as a seed value.

Subsequent communications between the transmission device 110 and the content provider 120 are encrypted using K _{d + 1} as the symmetric encryption / decryption key. For example, a content request transmitted from the transmission access device 110 to the content provider 120 is encrypted using K _{d + 1,} and content delivered from the provider 120 to the device 110 is transmitted using K _{d + 1.} It may be encrypted. As a result, even if the device 110 is fully imitated, devices that are not involved in the new key K _{d + 1} are unable to access the currently shared encryption key, so the original device and imitation Only one of the devices can access limited content.

According to one aspect of the invention, additional keys, such as key K _c, may be generated by content provider 120 and sent to device 110. The key may be used to encrypt the actual content, while the key K _d (or the refreshed key K _{d + 1} ) is used for other secure communications (of the key K _c Used for exchange).

  Referring now to FIG. 11, a block diagram of a system 1100 suitable for use with the device 110 is shown. System 1100 generally includes a secure processor and memory 1110, public key storage 1120, point-to-point transceiver 1130, content receiver 1140, and playback port 1150.

The secure processor 1110 may take the form of a smart card, as one example that does not limit the invention. Smart card 1100 includes first and second storage areas 1160, 1170 for storing two random numbers (K _d and K _{d + 1} , K _{d + 1} and K _{d + 2} ,...). be able to. Smart card 1100 may also include a secure storage area for storing the other keys, such as key K _c as described above. The random number memory 1160, 1170 is sufficiently large to accommodate both keys and a flag indicating (directly or indirectly) which key is operating. Can take the form of a data buffer. Smart card 1100 can further include a secure processor 1180.

  As used herein, “memory” generally refers to one or more devices capable of storing data, such as in the form of a chip, tape or disk. Memory includes, by way of example and not limitation, one or more random-access memory (RAM), read only memory (ROM), programmable read only memory (PROM), erase programmable read only memory ( EPROM), or an electrically erasable programmable read only memory (EEPROM) chip. The memory utilized by the processor may be internal or external to the integrated unit that contains the processor. For example, in the case of a microprocessor, the memory may be internal or external to the microprocessor itself. As used herein, “processor” generally refers to a computing device that includes a central processing unit (CPU) such as a microprocessor. The CPU generally extracts an arithmetic logic unit (ALU) that performs arithmetic and logical operations and an instruction (eg, a processor executable code) from the memory, decodes and executes the instruction, and requests the ALU if necessary. And a control device for performing. Of course, other elements such as, for example, an electronic interface or application specific integrated circuit (ASIC) may be used.

  Public key store 1120 may take the form of a memory that stores a list of public keys used to authenticate a content provider's certificate. Again, the CA public key storage device 1120 only contains a commonly available CA key, so it need not be secured, but may be secured.

  The transceiver 1130 may take the form of a modulator / demodulator (modem) that communicates over a public telephone network (PSTN), for example. As a modification, the transceiver 1130 comprises hardware suitable for communicating with a broadband gateway device, such as a DSL or cable modem (and thus coupled to a global interconnection of computers and computer networks commonly referred to as the Internet) and It can take the form of software.

  Receiver 1140 can take the form of hardware / software suitable for receiving content transmitted by content provider 120. Receiver 1140 may be suitable for receiving point-to-point transmissions or broadcast transmissions. Receiver 1140 is a satellite television signal receiver, cable television receiver, or (and thus a global interconnection of computers and computer networks commonly referred to as the Internet), all but as a non-limiting example. Can be in the form of hardware and / or software suitable for communicating with a broadband gateway device such as a DSL or cable modem.

  The playback port 1150 may be suitable for supplying received content to a display device such as a television. In the case of encrypted content, the content may be decrypted using the processor 1180 of the smart card 1110, or otherwise made suitable for display. Port 1150 may be a coaxial RF port and associated hardware / software, signal component ports and associated hardware / software, and / or high-density multimedia It can take the form of an interface (HDMI) port and associated hardware / software.

  With reference now to FIG. 12, a user interface 1200 in accordance with an aspect of the present invention is illustrated. The interface 1200 may be well suited to be displayed on the display device by the subscription device 110 to allow the user to select a content provider and subscription. Data and processor executable code for displaying interface 1200 (and / or interface 500) may be stored in the memory of device 110. The interface 1200 includes a data input device 1210, an accept device 1220, and a reject device 1230 that take the form of a list box in the example shown in FIG. User controls associated with a user interface device, such as a push button on device 110 or a remote control for device 110, allow a user to select a content provider and subscription using device 1210. In the example shown in FIG. 12, at the same time as activating the device 1220 in the form of a push button, information indicating that he has chosen to subscribe is sent to the selected content provider, and as a result, The described process is triggered. At the same time that device 1230 is activated, the subscription process may be canceled. As shown in FIG. 13, information 1240 regarding the selected provider and package may also be displayed and acknowledged by the user prior to selection of device 1220 or 1230. Information 1240 and programming choices provided by device 1210 may be preloaded into the memory of device 110, such as smart card 1110, and updated using, for example, transceiver 1130 or receiver 1140.

  It will be apparent to those skilled in the art that various modifications and variations can be made to the apparatus and process of the present invention without departing from the spirit or scope of the invention. Thus, it is intended that the present invention cover the modifications and variations of this invention provided they come within the scope of the appended claims and their equivalents.

100 System 110 Access Device 120 Content Provider 200, 300 Verification, Authentication Process 500, 1200 User Interface 510 Data Input Part 520 Accept Part 530 Reject Part 700 Key Generation, Transmission Process 900 Key Update Process 1100 With Access Device System to be used 1110, 1180 Processor 1120 Public key storage device 1130 Point-to-point transceiver 1140 Content receiver 1150 Playback port 1160, 1170 Random number memory 1210 Data input device 1220 Accept device 1230 Reject device 1240 Information

It will be apparent to those skilled in the art that various modifications and variations can be made to the apparatus and process of the present invention without departing from the spirit or scope of the invention. Thus, it is intended that the present invention cover the modifications and variations of this invention provided they come within the scope of the appended claims and their equivalents.
Preferred embodiments of the present invention are shown below.
Appendix 1. A method for enabling an access device to access content including audio / video programs from a content provider, comprising:
Receiving a certificate associated with a particular content provider;
Authenticating the certificate to determine unique data associated with the particular content provider;
Generating a key for communicating with the particular content provider;
Encrypting the key according to the unique data determined from the certificate and transmitting the encrypted key to the specific content provider;
Requesting content from the specific content provider;
Decrypting content received from the particular content provider with the key;
A method comprising the steps of:
Appendix 2. The method of claim 1, wherein the key is generated as a function of at least one of time, subscriber device serial number, and operational status of the subscriber device.
Appendix 3. The unique data associated with the specific content provider includes a public key associated with the specific content provider, and the key is encrypted using the public key. The method described in 1.
Appendix 4. Further comprising receiving from the content provider a notification of whether the transmitted encrypted key can be accepted for use, using the key if an acceptance notification is received When the content from the content provider is decrypted and a non-acceptance notification is received, another key is generated, the other key is encrypted, and the encrypted another key is The method of claim 1, wherein the process is repeated until transmission to the provider and an acceptance notification is received.
Appendix 5. The method of claim 1, wherein the requesting step includes encrypting the request using the key.
Appendix 6. The method of claim 1, further comprising the steps of providing a list of content providers, receiving a user-specific content provider selection, and transmitting a certificate request to a certificate authority. .
Appendix 7. The certificate is a certificate issued by a trusted certificate authority and the authenticating step uses the public key associated with the certificate authority key stored on the subscriber device to authenticate the certificate. The method of claim 1, comprising authenticating.
Appendix 8. Generating a second key, encrypting the second key using the key, and further transmitting the encrypted second key to the particular content provider; An additional note wherein the second key is used to decrypt the content subsequently received from the particular content provider upon receiving an acceptance notification from the particular content provider with respect to the second key. The method according to 1.
Appendix 9. The method of claim 8, wherein the second key is generated as a function of the key.
Appendix 10. Receiving payment information from the user;
Encrypting the payment information using the key;
Transmitting the encrypted payment information to the specific content provider;
The method according to appendix 1, further comprising:
Appendix 11. A device for communicating with a content provider,
A port for communicating with multiple content providers;
A memory having stored therein a first key and executable code for controlling the operation of the device;
A signal output for coupling the output signal to the display device; and
A processor coupled to the port, memory, and signal output, wherein the device transmits a request for a certificate from a certificate authority and authenticates the certificate received from the certificate authority to identify a specific Determining unique data associated with the content provider, encrypting a key using the unique data associated with the particular content provider, transmitting a request for the content to the particular content provider, and A processor operable to decrypt content received from the particular content provider using a key;
A device characterized by comprising:
Appendix 12. The apparatus of claim 11, wherein the processor is operative to generate the key in response to successful authentication of the certificate.
Appendix 13. The apparatus of claim 11, wherein the key is generated as a function of at least one of time, a serial number associated with the apparatus, and an operational status of the apparatus.
Appendix 14. The apparatus of claim 11, wherein the unique data includes a public key associated with the particular content provider.
Appendix 15. The memory includes a list of content providers, the processor displays the list of content providers, receives a selection of the particular content provider by a user, and further requests a certificate from the certificate authority. The apparatus of claim 11 wherein the apparatus operates to transmit and the certificate is authenticated using a public key associated with the certificate authority.
Appendix 16. The processor periodically generates another key, encrypts the other key using the key, transmits the other key to the specific content provider, and receives an acceptance notification. 12. The method of clause 11, wherein the second key is operative to encrypt the request for the particular content provider and decrypt the content received from the particular content provider. apparatus.
Appendix 17. The apparatus of claim 16, wherein the another key is generated as a function of the key.
Appendix 18. A method for enabling an access device to access digital content from a content provider, comprising:
Receiving authentication information associated with a particular content provider;
Processing the authentication information to determine unique data associated with the particular content provider included in the authentication information;
Generating a key for communicating with the particular content provider;
Encrypting the key in response to the unique data determined from a certificate and transmitting the encrypted key to the specific content provider;
Requesting content from the specific content provider;
Decrypting content received from the particular content provider using the key;
A method comprising the steps of:
Appendix 19. The method of claim 18, wherein the authentication information includes a certificate received from a designated certificate authority.
Appendix 20. The method of claim 19, wherein the processing step comprises authenticating the certificate using a public key associated with the certificate authority stored in a memory of the access device.

Claims (20)

A method for enabling an access device to access content including audio / video programs from a content provider, comprising:
Receiving a certificate associated with a particular content provider;
Authenticating the certificate to determine unique data associated with the particular content provider;
Generating a key for communicating with the particular content provider;
Encrypting the key according to the unique data determined from the certificate and transmitting the encrypted key to the specific content provider;
Requesting content from the specific content provider;
Decrypting content received from the particular content provider using the key.   The method of claim 1, wherein the key is generated as a function of at least one of a time, a subscriber device serial number, and an operational status of the subscriber device.   The unique data associated with the particular content provider includes a public key associated with the particular content provider, and the key is encrypted using the public key. The method according to 1.   Further comprising receiving from the content provider a notification of whether the transmitted encrypted key can be accepted for use, using the key if an acceptance notification is received When the content from the content provider is decrypted and a non-acceptance notification is received, another key is generated, the other key is encrypted, and the encrypted another key is The method of claim 1 wherein the process is repeated until transmission to the provider and an acceptance notification is received.   The method of claim 1, wherein the requesting step includes encrypting a request using the key.   The method of claim 1, further comprising: providing a list of content providers; receiving a selection of a particular content provider by a user; and transmitting a request for a certificate to a certificate authority. Method.   The certificate is a certificate issued by a trusted certificate authority and the authenticating step uses the public key associated with the certificate authority key stored on the subscriber device to authenticate the certificate. The method of claim 1 including authenticating.   Generating a second key, encrypting the second key using the key, and further transmitting the encrypted second key to the particular content provider; Receiving the acceptance notification from the particular content provider with respect to a second key and simultaneously using the second key to decrypt the content subsequently received from the particular content provider Item 2. The method according to Item 1.   The method of claim 8, wherein the second key is generated as a function of the key. Receiving payment information from the user;
Encrypting the payment information using the key;
The method of claim 1, further comprising: transmitting the encrypted payment information to the specific content provider. A device for communicating with a content provider,
A port for communicating with multiple content providers;
A memory having stored therein a first key and executable code for controlling the operation of the device;
A signal output for coupling the output signal to the display device; and
A processor coupled to the port, memory, and signal output, wherein the device transmits a request for a certificate from a certificate authority and authenticates the certificate received from the certificate authority to identify a specific Determining unique data associated with the content provider, encrypting a key using the unique data associated with the particular content provider, transmitting a request for the content to the particular content provider, and A processor operable to decrypt content received from the particular content provider using a key.   The apparatus of claim 11, wherein the processor is operable to generate the key in response to successful authentication of the certificate.   12. The device of claim 11, wherein the key is generated as a function of at least one of time, a serial number associated with the device, and an operational status of the device.   The apparatus of claim 11, wherein the unique data includes a public key associated with the particular content provider.   The memory includes a list of content providers, the processor displays the list of content providers, receives a selection of the particular content provider by a user, and further requests a certificate from the certificate authority. 12. The apparatus of claim 11, operative to transmit, wherein the certificate is authenticated using a public key associated with the certificate authority.   The processor periodically generates another key, encrypts the other key using the key, transmits the other key to the specific content provider, and receives an acceptance notification. 12. The method of claim 11, wherein the other key is operative to encrypt a request for the particular content provider and decrypt the content received from the particular content provider. Equipment.   The apparatus of claim 16, wherein the another key is generated as a function of the key. A method for enabling an access device to access digital content from a content provider, comprising:
Receiving authentication information associated with a particular content provider;
Processing the authentication information to determine unique data associated with the particular content provider included in the authentication information;
Generating a key for communicating with the particular content provider;
Encrypting the key in response to the unique data determined from a certificate and transmitting the encrypted key to the specific content provider;
Requesting content from the specific content provider;
Using the key to decrypt the content received from the particular content provider. The method of claim 18, wherein the authentication information includes a certificate received from a designated certificate authority.   The method of claim 19, wherein the processing step includes authenticating the certificate using a public key associated with the certificate authority stored in a memory of the access device.

Images