WO2010011106A2

WO2010011106A2 - Memory card-based conditional access system for mobile broadcast

Info

Publication number: WO2010011106A2
Application number: PCT/KR2009/004137
Authority: WO
Inventors: 이주화; 이진영; 이병성
Original assignee: 주식회사 드리머아이
Priority date: 2008-07-24
Filing date: 2009-07-24
Publication date: 2010-01-28
Also published as: WO2010011106A3; KR100950458B1; KR20100011233A

Abstract

The present invention relates to a memory card-based conditional access system (CAS) for mobile broadcasts that enables CAS services to be handled in the memory card. To this end, the present invention executes the generic bootstrapping architecture (GBA) between the CAS client and the bootstrapping service function/home subscriber system (BSF/HSS) in the memory card loaded in the CAS client so that the memory card loaded in the CAS client shares a shared key (KS) with the BSF/HSS. In addition, a long-term key message (LTKM) received from the CAS server is encrypted with a subscriber management key (SMK) induced from the KS to obtain a service encryption key (SEK) (or program encryption key (PEK)) to provide a traffic encryption key (TEK), and it is preferable that safe delivery to the descrambler of the TEK thus obtained be effected in the memory card. The present invention executes the decryption of the keys (SMK, SEK/PEK, TEK) and messages, including GBA, required to view the encrypted contents, within the memory card, thereby ensuring safe management of the keys (SMK, SEK/PEK, TEK).

Description

Memory card based mobile broadcast reception restriction system

The present invention relates to a memory card-based mobile broadcast reception restriction system, and more particularly, to a memory card-based mobile broadcast reception restriction system for processing a CAS service in a memory card.

Digital Video Broadcasting-Handheld (DVB-H) technology, a European mobile TV standard, includes a reception restriction system that provides broadcast services only to subscribers who have the right to watch broadcast content, and OMA-BCAST SCP (Open Mobile Alliance-Mobile Broadcast). Provides CAS (Conditional Access System) service based on Sub Working Group Smart Card Profile.

The above-described DVB-H technology is a GBA performed between the Universal Integrated Circuit Card (UICC), which is a core security card used for mobile terminals of the 3rd Generation Partnership Project (3GPP) system, and the Bootstrapping Service Function / Home Subscriber System (BSF / HSS). It uses CK (Cipher Key) and IK (Integrity Key) generated through (Generic Bootstrapping Architecture).

That is, through the GBA performed between the mobile terminal and the BSF / HSS to execute an application in the mobile network, the UICC and BSF / HSS of the mobile terminal share the shared key KS (Shared Key) generated by the concatenation of CK and IK. Done. At this time, the CAS server requests the shared key KS (= CK∥IK) stored in the BSF / HSS to be transmitted securely, and the SMK (Subscriber Management Key) derived from the shared key KS received from the BSF / HSS. CAS service is supported by applying SEK (Service Encryption Key) or PEK (Program Encryption Key) generated in any way, and TEK (Traffic Encryption Key) generated in any way to MIKEY (Multimedia Internet KEYing) protocol.

GBA_ME (ME-based GBA) and GBA_U (GBA with UICC-based enhancements) are a method of deriving a key using a shared key KS between a CAS server providing a broadcasting service and a CAS client equipped with UICC. The document suggests.

1 is a view schematically showing the configuration of a mobile broadcasting system according to the prior art. The CAS server derives the SMK using the shared key KS, generates the SEK / PEK in an arbitrary manner, and encrypts the Long-Term Key Massage (LTKM) including the SEK / PEK with the SMK. Then, it is transmitted to the CAS client through a broadcasting network or a mobile network, a TEK is generated in an arbitrary manner, the STKM (Short-Term Key Massage) including the TEK is encrypted by SEK, and transmitted to the CAS client through the broadcasting network. The scrambled broadcast content is TEK and transmitted to the CAS client through the broadcast network.

Meanwhile, the CAS client derives the SMK using the shared key KS received from the UICC, decrypts the LTKM received from the CAS server with the SMK, obtains the SEK, and decrypts the STKM received from the CAS server with the SEK to obtain the TEK. do. Then, by using TEK and descrambler, the broadcast content received from the CAS server is decoded to watch the broadcast.

However, when inducing the shared key KS by performing GBA_ME or GBA_U based on the UICC described above, after performing authentication and key matching operations of GBA_ME / GBA_U, a key for viewing the actual encrypted broadcast content (SMK , SEK / PEK, TEK) and message decryption are handled by the mobile terminal rather than by the UICC, so the key (SMK, SEK / PEK, TEK) may be exposed, making it difficult to secure key management. Done.

In order to solve the above problem, the key (SMK, SEK / PEK, TEK) for viewing the encrypted broadcast content in the UICC and modifying the COCC (Card Operating System) of the UICC to perform message decryption In this case, a new purchase of a UICC with a modified COS is required to receive a broadcast service, and a customer using an existing product cannot receive a broadcast service unless the existing UICC is replaced with a modified UICC.

In addition, as described above, even when the key (SMK, SEK / PEK, TEK) for viewing the broadcast content encrypted in the UICC and the message operating system (COS) of the UICC is modified to perform message decryption. There is a problem in that a complex GBA based on UICC needs to be performed because a UICC that is dependent on a provider is used.

DISCLOSURE OF THE INVENTION The present invention has been made to solve the above-described problem, and is a memory card that enables decryption of a key (SMK, SEK / PEK, TEK) and message for viewing encrypted broadcast content including a GBA in a memory card. The purpose of the present invention is to provide a mobile broadcast reception restriction system.

Another object of the present invention is to perform a GBA based on the UICC, the key (SMK, SEK / PEK, TEK) and message decryption for viewing the encrypted broadcast content can be performed in the memory card based The present invention provides a mobile broadcast reception restriction system.

Still another object of the present invention is a memory card mounted on a CAS server and a CAS client to perform AKA by directly interworking through a bidirectional network, and a key (SMK, SEK / PEK, TEK) and a message for viewing encrypted broadcast content. The present invention provides a memory card-based mobile broadcast reception limiting system capable of decoding.

According to an aspect of the present invention, there is provided a memory card-based mobile broadcast reception restriction system, comprising: a Key Management System Device Agent (KDA) interface unit for receiving LTKM and STKM from a CAS server; A memory card for performing a GBA through the KDA interface unit and decoding the LTKM and STKM received from the KDA interface unit to obtain a TEK required for CAS service operation; And a descrambler configured to descramble broadcast content received from the CAS server using the TEK received from the memory card, wherein the memory card performs BSF / HSS and GBA through the KDA interface unit. A GBA execution unit for inducing SMK using the shared key KS generated by performing GBA; An LTKM analysis and decoding unit for decoding the LTKM received from the KDA interface unit into the SMK and then obtaining the SEK from the LTKM; Decode the STKM received from the KDA interface unit to the SEK, obtain the TEK from the STKM, and includes a STKM analysis and decryption unit for securely delivering the TEK to the descrambler through the Secure Authenticated Channel (SAC) It is preferable to make.

In accordance with another aspect of the present invention, there is provided a memory card-based mobile broadcast reception limiting system comprising: a UICC for performing a BSF / HSS and a GBA through a mobile network and storing a shared key KS generated by performing a GBA; A KDA interface unit for inducing an SMK using the shared key KS received from the UICC and receiving LTKM and STKM from a CAS server; A memory card for decoding the LTKM and STKM received from the KDA interface unit to obtain a TEK required for CAS service operation; And a descrambler configured to descramble the broadcast content transmitted from the CAS server using the TEK received from the memory card, wherein the memory card includes the LTKM received from the KDA interface unit. An LTKM analysis and decoding unit for decoding the SMK received from the LTKM and obtaining the SEK from the LTKM; After decoding the STKM received from the KDA interface unit to the SEK, it is preferable to include a STKM analysis and decoding unit for obtaining the TEK from the STKM, and securely delivers the TEK to the descrambler through the SAC.

Memory card-based mobile broadcast reception restriction system according to another embodiment of the present invention, KDA interface unit for receiving the LTKM and STKM from the CAS server; A memory card interworking with the CAS server directly through the KDA interface unit to perform AKA (Authentication and Key Agreement), and decoding the LTKM and STKM received from the KDA interface unit to obtain a TEK required for CAS service operation; And a descrambler configured to descramble broadcast content received from the CAS server using the TEK received from the memory card, wherein the memory card is shared with a shared key K previously issued with the CAS server. An AKA performing unit performing AKA with the CAS server through the KDA interface unit using any one of key pairs Puk / Prk, and inducing SMK using the shared key KS generated by performing AKA; An LTKM analysis and decoding unit for decoding the LTKM received from the KDA interface unit into the SMK and then obtaining the SEK from the LTKM; After decoding the STKM received from the KDA interface unit to the SEK, it is preferable to include a STKM analysis and decoding unit for obtaining the TEK from the STKM, and securely delivers the TEK to the descrambler through the SAC.

According to the memory card-based mobile broadcast reception restriction system of the present invention, it is possible to ensure the secure management of the keys (SMK, SEK / PEK, TEK) by performing all the CAS services including the GBA in the memory card .

In addition, the GBA is performed using the UICC, and the CAS service is performed in the memory card, so that the mobile terminal equipped with the existing UICC can be provided with the broadcast service only by inserting the memory card.

In addition, the memory card mounted on the CAS server and the CAS client performs AKA by directly interworking through a bidirectional network, and then performs CAS service, thereby eliminating the need to perform a complex GBA based on the UICC depending on the carrier. Instead of the GBA processing procedure that is implemented only in the network, the memory card installed in the CAS client performs AKA by directly interworking with the CAS server through the two-way network, thus enhancing the stability of the security of broadcasting services that are not linked to the mobile network, such as IPTV. Will be.

1 is a view schematically showing the configuration of a mobile broadcasting system according to the prior art.

2 is a view showing an example of the structure of the LTKM applied to the present invention.

3 is a view showing an example of the structure of the STKM applied to the present invention.

4 is a diagram schematically illustrating a configuration of a memory card based mobile broadcast reception restriction system according to an embodiment of the present invention.

FIG. 5 is a diagram schematically illustrating a configuration of a memory card-based mobile broadcast reception restriction system according to another embodiment of the present invention. FIG.

FIG. 6 is a diagram schematically illustrating a configuration of a memory card-based mobile broadcast reception restriction system according to another embodiment of the present invention. FIG.

*** Explanation of symbols for the main parts of the drawing ***

100, 500 CAS server, 110 SMK induction part,

120, 520. SEK generator, 130, 530. LTKM encryption and transmitter,

140, 540. TEK generation unit, 150, 550. STKM encryption and transmission unit,

160, 560.scrambler, 200, 400, 600.CAS client,

210, 420, 610.KDA interface, 220, 430. 620.SD card,

221.GBA execution unit, 222, 431, 622. LTKM analysis and decoding unit,

223, 432, 623. STKM analysis and decryption unit, 224, 433, 624. Cryptographic Engine,

225, 434, 625. File system, 230, 440, 630. Descrambler,

300.BSF / HSS, 410.UICC

510, 621. AKA Execution Unit

Hereinafter, a mobile card reception restriction system based on a memory card according to an exemplary embodiment of the present invention will be described in detail with reference to the accompanying drawings.

In the embodiment of the present invention, a case where a SD (Secure Digital) card to which a smart card function is added is used as a memory card will be described as an example. However, the memory card to which the present invention is applied is not limited to an SD card to which a smart card function is added, and the memory card to which the present invention is applied is a Secure Digital High Capacity (SDHC) card and a smart card function to which a smart card function is added. The added CF (Compact Flash) card, smart card function added xD card, etc. can be implemented in various ways.

2 is a diagram illustrating a structure of a long-term key message (LTKM) applied to the present invention, the device type of the header field of the LTKM value can be set so that the SD card is selected, SIO (Serial Input Output) ) Type can be set so that SDIO (Secure Digital Input Output) is selected.

3 is a diagram illustrating the structure of a short-term key message (STKM) applied to the present invention, the value of the SD card can be set to the device type of the header field of the STKM, the SIO type is SDIO You can set the value to be selected.

4 is a diagram schematically illustrating a configuration of a memory card-based mobile broadcast reception restriction system according to an embodiment of the present invention.

First, the CAS server 100 generates a subscriber management key (SMK) derivation unit 110, a service encryption key (SEK) generation unit 120, an LTKM encryption and transmission unit 130, and a TEK (Traffic Encryption Key) generation. The unit 140, the STKM encryption and transmission unit 150, and a scrambler (Scrambler) (160).

In such a configuration, the SMK induction unit 110 requests and stores the shared key KS shared by the CAS client 200 and the BSF / HSS 300 through the GBA to the BSF / HSS 300, and is stored therein. Induce SMK using shared key KS.

SEK generation unit 120 generates the SEK by using any random number generation method.

The LTKM encryption and transmission unit 130 encrypts the LTKM including the SEK generated by the SEK generation unit 120 with the SMK received from the SMK derivation unit 110, and stores the LTKM encrypted with the SMK through a broadcasting network or a mobile network. Send to client 200. Here, LTKM including SEK is generated through the MIKEY protocol.

The TEK generator 140 generates a TEK using an arbitrary random number generation method.

The STKM encryption and transmission unit 150 encrypts the STKM including the TEK generated by the TEK generation unit 140 with the SEK received from the SEK generation unit 120, and converts the STKM encrypted by the SEK through the broadcasting network to the CAS client ( 200). Here, the STKM including the TEK is generated through the MIKEY protocol.

The scrambler 160 scrambles the broadcast content to be transmitted to the CAS client 200 with the TEK received from the TEK generation unit 140 and transmits the scrambler 160 to the CAS client 200.

The CAS client 200 may include a key management system device agent (KDA) interface unit 210, an SD card 220, and a descrambler 230.

In such a configuration, the KDA interface unit 210 receives the LTKM transmitted by the CAS server 100 through a broadcasting network or a mobile network, and receives the STKM transmitted by the CAS server 100 through a broadcasting network.

As described above, the KDA interface unit 210 checks the value set in the device type of the header field of the LTKM and STKM received from the CAS server 100 and the value set in the SIO type, so that the LTKM and STKM are the SD card ( If it is set to be transmitted to 220, LTKM and STKM is transferred to the SD card (220).

The SD card 220 includes a GBA performing unit 221, an LTKM analyzing and decoding unit 222, and an STKM analyzing and decoding unit 223.

In such a configuration, the GBA execution unit 221 performs a GBA by attempting a GBA to the BSF / HSS 300 through the KDA interface unit 210 by using an AKA applet and a crypto engine. In addition, the SMK is derived using the shared key KS generated by performing the GBA.

When the LTKM analysis and decryption unit 222 receives the LTKM from the KDA interface unit 210 through the SIO port of the SD card 220, the LTKM GBA is obtained using the Key Management System (KMS) applet and the encryption engine 224. After decoding the SMK received from the execution unit 221, the decoded LTKM is analyzed to obtain the SEK from the LTKM.

When the STKM analysis and decryption unit 223 receives the STKM from the KDA interface 210 through the SIO port of the SD card 220, the LTKM analysis and decryption unit STKM using the KMS applet and the encryption engine 224 ( After decoding with the SEK received from 222, the decoded STKM is analyzed to obtain TEK from the STKM.

The STKM analysis and decryption unit 223 safely transmits the TEK to the descrambler 230 using the SAC applet including the SAC protocol.

The file system 225 uses the shared key KS and SMK obtained through the GBA execution unit 221 and the TEK obtained through the SEK, STKM analysis and decryption unit 223 obtained through the analysis and decryption unit 222. Store it in the memory area, and if a new key is received, update using the newly received key.

Meanwhile, the descrambler 230 descrambles the broadcast content received from the CAS server 100 using the TEK received from the STKM analyzer and decoder 223.

5 is a diagram schematically illustrating a configuration of a memory card-based mobile broadcast reception restriction system according to another embodiment of the present invention.

Since the CAS server 100 applied to another embodiment of the present invention has the same configuration and operation as the CAS server 100 applied in one embodiment, the same reference numerals will be given and the description thereof will be omitted.

Meanwhile, the CAS client 400 includes a UICC 410, a KDA interface 420, an SD card 430, and a descrambler 440.

In such a configuration, the UICC 410 performs a GBA with the BSF / HSS 300 through the mobile network, and stores the shared key KS generated by performing the GBA.

The KDA interface unit 420 derives an SMK using the shared key KS received from the UICC 410 and transmits the SMK to the SD card 430, and receives the LTKM transmitted by the CAS server 100 through a broadcasting network or a mobile network. The CAS server 100 receives the STKM transmitted through the broadcasting network.

The KDA interface unit 420 checks the value set in the device type of the header field of the LTKM and STKM received from the CAS server 100 and the value set in the SIO type so that the LTKM and STKM may be the SD card 430. If it is set to be delivered to), and receives the received LTKM and STKM to the SD card (430).

The SD card 430 includes an LTKM analysis and decoding unit 431 and an STKM analysis and decoding unit 432.

In such a configuration, when the LTKM analysis and decryption unit 431 receives the LTKM from the KDA interface unit 420 through the SIO port of the SD card 430, the LTKM is analyzed using the KMS applet and the encryption engine 433. After decoding with the SMK received from the KDA interface unit 420, the decoded LTKM is analyzed to obtain the SEK from the LTKM.

When the STKM analysis and decryption unit 432 receives the STKM from the KDA interface unit 420 through the SIO port of the SD card 430, the LTKM analysis and decryption unit STKM using the KMS applet and the encryption engine 433 ( After decoding by the SEK received from 431, the decoded STKM is analyzed to obtain a TEK from the STKM.

The STKM analysis and decryption unit 432 safely transmits the TEK to the descrambler 440 using the SAC applet including the SAC protocol.

The file system 434 stores the SMK obtained through the KDA interface unit 420 and the TEK obtained through the SEK, STKM analyzing and decoding unit 432 acquired through the LTKM analyzing and decoding unit 431 in a memory area. If a new key is received, update is performed using the newly received key.

Meanwhile, the descrambler 440 descrambles the broadcast content received from the CAS server 100 using the TEK received from the STKM analyzer and decoder 432.

6 is a diagram schematically illustrating a configuration of a memory card-based mobile broadcast reception restriction system according to another embodiment of the present invention.

First, the CAS server 500 includes an AKA performer 510, an SEK generator 520, an LTKM encryption and transmitter 530, a TEK generator 540, and an STKM encryption and transmitter 550. And a scrambler 560.

In this configuration, the AKA execution unit 510 uses the shared key K and the random number issued together with the CAS client 600 from the key issuing system (not shown) when the CAS client 600 subscribes to the mobile broadcasting service. By performing AKA with the SD card 430 mounted in the CAS client 600 in a manner of generating a one-time password (OTP), SMK is induced by using the shared key KS generated by performing AKA.

Alternatively, the AKA execution unit 510 may generate a random number and a public key pair Puk / Prk issued together with the CAS client 600 from a key issuing system (not shown) when the CAS client 600 subscribes to the mobile broadcasting service. In this manner, the AKA is performed with the SD card 430 mounted on the CAS client 600, and the SMK is derived using the shared key KS generated by performing the AKA.

As described above, in another embodiment of the present invention, the public key pair Puk / Prk, including the shared key K, is issued from the key issuing system of the CAS service subscriber, not the mobile communication provider.

The SEK generator 520 generates the SEK using any random number generation scheme.

The LTKM encryption and transmission unit 530 encrypts the LTKM including the SEK generated by the SEK generation unit 520 with the SMK received from the AKA execution unit 510 and transmits the LTKM encrypted with the SMK through a broadcasting network or a bidirectional network. Send to the CAS client 600. Here, LTKM including SEK is generated through the MIKEY protocol.

The TEK generator 540 generates the TEK by using an arbitrary random number generation method.

The STKM encryption and transmission unit 550 encrypts the STKM including the TEK generated by the TEK generation unit 540 with the SEK received from the SEK generation unit 520, and converts the STKM encrypted with the SEK through the broadcasting network to the CAS client ( 600). Here, the STKM including the TEK is generated through the MIKEY protocol.

The scrambler 560 scrambles the broadcast content to be transmitted to the CAS client 600 to the TEK received from the TEK generation unit 540 and transmits the scrambler to the CAS client 600.

Meanwhile, the CAS client 600 includes a KDA interface unit 610, an SD card 620, and a descrambler 630.

In such a configuration, the KDA interface unit 610 receives the LTKM transmitted by the CAS server 500 through the broadcasting network or the bidirectional network, and receives the STKM transmitted by the CAS server 500 through the broadcasting network.

As described above, the KDA interface unit 610 checks the value set in the device type of the header field of the LTKM and STKM received from the CAS server 500 and the value set in the SIO type, so that the LTKM and STKM are the SD card ( If set to 620, LTKM and STKM are transferred to SD card 620.

The SD card 620 includes an AKA performer 621, an LTKM analyzer and decoder 622, and an STKM analyzer and decoder 623.

In such a configuration, when the CAS client 600 is subscribed to the mobile broadcasting service, the AKA execution unit 621 may use the shared key K or public key issued together with the CAS server 500 from a key issuing system (not shown). AKA is performed by directly interworking with the AKA performing unit 621 of the CAS server 500 through the KDA interface unit 610 using the pair Puk / Prk, and SMK is generated using the shared key KS generated by performing the AKA. Induce.

When the LTKM analysis and decryption unit 622 receives the LTKM from the KDA interface unit 610 through the SIO port of the SD card 620, the AKA execution unit 621 performs LTKM using the KMS applet and the encryption engine 624. After decoding with the SMK received from the decoded LTKM is analyzed to obtain the SEK from the LTKM.

When the STKM analysis and decryption unit 623 receives the STKM from the KDA interface unit 610 through the SIO port of the SD card 620, the LTKM analysis and decryption unit STKM using the KMS applet and the encryption engine 624 ( After decoding by the SEK received from 622, the decoded STKM is analyzed to obtain a TEK from the STKM.

The STKM analysis and decryption unit 623 safely transmits the TEK to the descrambler 630 using the SAC applet including the SAC protocol.

The file system 625 is a shared key K and a public key pair Puk / Prk issued together with the CAS server 500, and a shared key KS and SMK, LTKM analysis and decryption unit 622 obtained through the AKA performing unit 621. The TEK acquired through the SEK, STKM analysis and decryption unit 623 obtained through the EK is stored in the memory area, and when a new key is received, the update is performed using the newly received key.

Meanwhile, the descrambler 630 descrambles the broadcast content received from the CAS server 500 using the TEK received from the STKM analyzer and decoder 623.

The memory card-based mobile broadcast reception limiting system of the present invention is not limited to the above-described embodiments, and may be modified in various ways within the scope of the technical idea of the present invention.

The present invention relates to a memory card based mobile broadcast reception restriction system that enables a memory card to process a CAS service. According to the memory card-based mobile broadcast reception restriction system of the present invention, it is possible to ensure the secure management of the key (SMK, SEK / PEK, TEK) by performing all the CAS services including the GBA in the memory card .

Claims

A Key Management System Device Agent (KDA) interface unit for receiving a Long-Term Key Message (LTKM) and a Short-Term Key Message (STKM) from a Conditional Access System (CAS) server;

A memory card which performs a Generic Bootstrapping Architecture (GBA) through the KDA interface unit, and decrypts the LTKM and STKM received from the KDA interface unit to obtain a Traffic Encryption Key (TEK) required for CAS service operation;

And a descrambler configured to descramble broadcast content received from the CAS server using the TEK received from the memory card.

The memory card performs a GBA with a BSF / HSS (Bootstrapping Service Function / Home Subscriber System) through the KDA interface unit, and uses a shared key KS generated by performing a GBA to derive a SMK (Subscriber Management Key). Execution unit;

An LTKM analysis and decryption unit for decrypting the LTKM received from the KDA interface unit into the SMK and then obtaining a Service Encryption Key (SEK) from the LTKM;

Decode the STKM received from the KDA interface unit to the SEK, obtain a TEK from the STKM, and includes an STKM analysis and decryption unit for securely delivering the TEK to the descrambler through the Secure Authenticated Channel (SAC) Memory card-based mobile broadcast reception restriction system.
The method of claim 1, wherein the KDA interface unit,

Analyzing the header fields of the LTKM and STKM received from the CAS server, if the LTKM and STKM is set to be delivered to the memory card, the LTKM and STKM is delivered to the memory card Mobile broadcast reception restriction system.
The method of claim 1, wherein the memory card,

The shared key KS and SMK obtained through the GBA execution unit, the SEK obtained through the LTKM analysis and decryption unit, and the TEK obtained through the STKM analysis and decryption unit are stored in a memory area, and the update is performed using the newly received key. A memory card based mobile broadcast reception restriction system, further comprising a file system.
A Universal Integrated Circuit Card (UICC) for performing a BSF / HSS (Bootstrapping Service Function / Home Subscriber System) and a Generic Bootstrapping Architecture (GBA) through a mobile network, and storing a shared key KS generated by performing a GBA;

Deriving a Subscriber Management Key (SMK) using the shared key KS received from the UICC and receiving a Long-Term Key Message (LTKM) and a Short-Term Key Message (STKM) from a Conditional Access System (CAS) server A key management system device agent (KDA) interface unit;

A memory card for decrypting the LTKM and STKM received from the KDA interface unit to obtain a Traffic Encryption Key (TEK) required for CAS service operation;

And a descrambler configured to descramble broadcast content received from the CAS server using the TEK received from the memory card.

The memory card includes: an LTKM analysis and decryption unit for decrypting the LTKM received from the KDA interface unit to the SMK received from the KDA interface unit, and then obtaining a Service Encryption Key (SEK) from the LTKM;

Decode the STKM received from the KDA interface unit to the SEK, obtain the TEK from the STKM, and includes a STKM analysis and decryption unit for securely delivering the TEK to the descrambler through the Secure Authenticated Channel (SAC) Memory card-based mobile broadcast reception restriction system.
The method of claim 4, wherein the KDA interface unit,

The SMK generated using the shared key KS received from the UICC is transferred to the memory card, and the header fields of the LTKM and STKM received from the CAS server are analyzed so that the LTKM and STKM are transferred to the memory card. If set, the memory card-based mobile broadcast reception restriction system, characterized in that for transmitting the LTKM and STKM to the memory card.
The memory card of claim 4, wherein the memory card includes:

A file system for storing the SMK obtained through the KDA interface unit, the SEK obtained through the LTKM analysis and decryption unit, and the TEK obtained through the STKM analysis and decryption unit in a memory area and performing an update using a newly received key. Memory card based mobile broadcast reception restriction system, characterized in that further comprises.
A key management system device agent (KDA) interface unit for receiving a Long-Term Key Message (LTKM) and a Short-Term Key Message (STKM) from a Conditional Access System (CAS) server;

Perform an AKA (Authentication and Key Agreement) by directly interworking with the CAS server through the KDA interface unit, and decrypt the LTKM and STKM received from the KDA interface unit to obtain a TEK (Traffic Encryption Key) required for CAS service operation. A memory card;

And a descrambler configured to descramble broadcast content received from the CAS server using the TEK received from the memory card.

The memory card is generated by performing AKA with the CAS server through the KDA interface using any one of a shared key K and a public key pair Puk / Prk previously issued together with the CAS server, and performing AKA. An AKA performing unit for inducing a subscriber management key (SMK) using the shared key KS;

An LTKM analysis and decryption unit for decrypting the LTKM received from the KDA interface unit into the SMK and then obtaining a Service Encryption Key (SEK) from the LTKM;

Decode the STKM received from the KDA interface unit to the SEK, obtain the TEK from the STKM, and includes a STKM analysis and decryption unit for securely delivering the TEK to the descrambler through the Secure Authenticated Channel (SAC) Memory card-based mobile broadcast reception restriction system.
The method of claim 7, wherein the KDA interface unit,

Analyzing the header fields of the LTKM and STKM received from the CAS server, if the LTKM and STKM is set to be delivered to the memory card, the LTKM and STKM is delivered to the memory card Mobile broadcast reception restriction system.
The method of claim 7, wherein the memory card,

Shared key K or public key pair Puk / Prk previously issued with the CAS server, shared key KS and SMK obtained through the AKA execution unit, SEK obtained through the LTKM analysis and decryption unit, and STKM analysis and decryption unit And a file system for storing the TEK obtained through the memory area and performing an update using a newly received key.
The method of claim 7, wherein the CAS server,

AKA and a memory card mounted on a CAS client are performed using any one of the shared key K and the public key pair Puk / Prk, and a SMK (Subscriber Management Key) is generated using the shared key KS generated by performing AKA. Inducing AKA performing section;

An SEK generation unit generating an SEK using an arbitrary random number scheme;

An LTKM encryption and transmission unit encrypting the LTKM including the SEK generated by the SEK generation unit with the SMK and transmitting the encrypted LTKM to the CAS client;

A TEK generator for generating TEK using any random number method;

An STKM encryption and transmission unit for transmitting the STKM including the TEK generated by the TEK generation unit to the CAS client by encrypting the STKM with the SEK;

And a scrambler configured to scramble broadcast content to the TEK and transmit the scrambled content to the CAS client.
The method of claim 10, wherein the AKA execution unit,

Memory card-based mobile broadcast, characterized in that for performing the AKA to generate a shared key KS by generating a one-time password (OTP) using the shared key K and a random number issued with the CAS client in advance Restriction system.
The method of claim 10, wherein the AKA execution unit,

And a shared card KS by performing AKA in a manner using random number and the public key pair Puk / Prk previously issued together with the CAS client.
BSF / HSS (Bootstrapping Service) through a Key Management System Device Agent (KDA) interface that is embedded within a CAS (Conditional Access System) client and receives a Long-Term Key Message (LTKM) and a Short-Term Key Message (STKM) from a CAS server. A GBA performing unit performing a GBA with a Function / Home Subscriber System) and inducing a subscriber management key (SMK) using a shared key KS generated by performing a GBA;

An LTKM analysis and decryption unit for decrypting the LTKM received from the CAS server through the KDA interface unit into the SMK and then obtaining a Service Encryption Key (SEK) from the LTKM;

After decoding the STKM received from the CAS server through the KDA interface unit to the SEK, the TEK is obtained from the STKM, and the TEK is descrambler mounted in the CAS client through a Secure Authenticated Channel (SAC). Memory card comprising a STKM analysis and decryption unit for secure delivery.
It is installed in a CAS (Conditional Access System) client to receive a Long-Term Key Message (LTKM) and a Short-Term Key Message (STKM) from a CAS server, and uses the shared key KS received from a Universal Integrated Circuit Card (UICC). LTKM analysis of decoding the LTKM received from the CAS server through the Key Management System Device Agent (KDA) interface unit for inducing a Subscriber Management Key (SMK) into the SMK, and then obtaining a Service Encryption Key (SEK) from the LTKM. And a decoding unit;

After decoding the STKM received from the CAS server through the KDA interface unit to the SEK, the TEK is obtained from the STKM, and the TEK is descrambler mounted in the CAS client through a Secure Authenticated Channel (SAC). Memory card comprising a STKM analysis and decryption unit for secure delivery.
A shared key with the CAS server through a Key Management System Device Agent (KDA) interface unit mounted within a CAS (Conditional Access System) client to receive a Long-Term Key Message (LTKM) and a Short-Term Key Message (STKM) from a CAS server. An AKA execution unit performing an AKA (Authentication and Key Agreement) using any one of K and a public key pair Puk / Prk, and inducing a SMK (Subscriber Management Key) using a shared key KS generated by performing AKA; ;

An LTKM analysis and decryption unit for decrypting the LTKM received from the CAS server through the KDA interface unit into the SMK and then obtaining a Service Encryption Key (SEK) from the LTKM;

After decoding the STKM received from the CAS server through the KDA interface unit to the SEK, the TEK is obtained from the STKM, and the TEK is descrambler mounted in the CAS client through a Secure Authenticated Channel (SAC). Memory card comprising a STKM analysis and decryption unit for secure delivery.
A Key Management System Device Agent (KDA) interface unit for receiving a Long-Term Key Message (LTKM) and a Short-Term Key Message (STKM) from a Conditional Access System (CAS) server;

A descrambler that descrambles the broadcast content received from the CAS server using the TEK received from a memory card for deriving a traffic encryption key (TEK) required for CAS service operation after performing AKA (Authentication and Key Agreement). CAS client, including.
A Universal Integrated Circuit Card (UICC) for performing a BSF / HSS (Bootstrapping Service Function / Home Subscriber System) and a Generic Bootstrapping Architecture (GBA) through a mobile network, and storing a shared key KS generated by performing a GBA;

Deriving a Subscriber Management Key (SMK) using the shared key KS received from the UICC and receiving a Long-Term Key Message (LTKM) and a Short-Term Key Message (STKM) from a Conditional Access System (CAS) server A key management system device agent (KDA) interface unit;

And a descrambler that descrambles the broadcast content received from the CAS server using the TEK received from a memory card for decrypting the LTKM and STKM to obtain a traffic encryption key (TEK) required for CAS service operation. Client.