CN101023664A - 用于管理存取条件存取数据的装置的方法 - Google Patents

用于管理存取条件存取数据的装置的方法 Download PDF

Info

Publication number
CN101023664A
CN101023664A CNA2005800311777A CN200580031177A CN101023664A CN 101023664 A CN101023664 A CN 101023664A CN A2005800311777 A CNA2005800311777 A CN A2005800311777A CN 200580031177 A CN200580031177 A CN 200580031177A CN 101023664 A CN101023664 A CN 101023664A
Authority
CN
China
Prior art keywords
access device
multimedia unit
request
administrative center
message
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CNA2005800311777A
Other languages
English (en)
Other versions
CN101023664B (zh
Inventor
格里高利·杜瓦尔
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nagravision SARL
Original Assignee
Nagravision SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Family has litigation
First worldwide family litigation filed litigation Critical https://patents.darts-ip.com/?family=34929590&utm_source=google_patent&utm_medium=platform_link&utm_campaign=public_patent_search&patent=CN101023664(A) "Global patent litigation dataset” by Darts-ip is licensed under a Creative Commons Attribution 4.0 International License.
Application filed by Nagravision SA filed Critical Nagravision SA
Publication of CN101023664A publication Critical patent/CN101023664A/zh
Application granted granted Critical
Publication of CN101023664B publication Critical patent/CN101023664B/zh
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/436—Interfacing a local distribution network, e.g. communicating with another STB or one or more peripheral devices inside the home
    • H04N21/4367—Establishing a secure communication between the client and a peripheral device or smart card
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/162—Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
    • H04N7/163—Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing by receiver means only
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/258—Client or end-user data management, e.g. managing client capabilities, user preferences or demographics, processing of multiple end-users preferences to derive collaborative data
    • H04N21/25808—Management of client data
    • H04N21/25816—Management of client data involving client authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/41—Structure of client; Structure of client peripherals
    • H04N21/418—External card to be used in combination with the client device, e.g. for conditional access
    • H04N21/4181—External card to be used in combination with the client device, e.g. for conditional access for conditional access
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/41—Structure of client; Structure of client peripherals
    • H04N21/426—Internal components of the client ; Characteristics thereof
    • H04N21/42684—Client identification by a unique number or address, e.g. serial number, MAC address, socket ID
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/458—Scheduling content for creating a personalised stream, e.g. by combining a locally stored advertisement with an incoming stream; Updating operations, e.g. for OS modules ; time-related management operations
    • H04N21/4586—Content update operation triggered locally, e.g. by comparing the version of software modules in a DVB carousel to the version stored locally
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
    • H04N21/4623—Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/61—Network physical structure; Signal processing
    • H04N21/6106—Network physical structure; Signal processing specially adapted to the downstream path of the transmission network
    • H04N21/6143—Network physical structure; Signal processing specially adapted to the downstream path of the transmission network involving transmission via a satellite
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/61—Network physical structure; Signal processing
    • H04N21/6156—Network physical structure; Signal processing specially adapted to the upstream path of the transmission network
    • H04N21/6193—Network physical structure; Signal processing specially adapted to the upstream path of the transmission network involving transmission via a satellite
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/63—Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
    • H04N21/633—Control signals issued by server directed to the network components or client
    • H04N21/6332—Control signals issued by server directed to the network components or client directed to client
    • H04N21/6334—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/63—Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
    • H04N21/637—Control signals issued by the client directed to the server or network components
    • H04N21/6377—Control signals issued by the client directed to the server or network components directed to server
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/65—Transmission of management data between client and server
    • H04N21/654—Transmission by server directed to the client
    • H04N21/6543—Transmission by server directed to the client for forcing some client operations, e.g. recording
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/65—Transmission of management data between client and server
    • H04N21/658—Transmission by the client directed to the server
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/65—Transmission of management data between client and server
    • H04N21/658—Transmission by the client directed to the server
    • H04N21/6583—Acknowledgement
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
    • H04N21/835—Generation of protective data, e.g. certificates
    • H04N21/8355—Generation of protective data, e.g. certificates involving usage data, e.g. number of copies or viewings allowed
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/167—Systems rendering the television signal unintelligible and subsequently intelligible
    • H04N7/1675—Providing digital key or authorisation information for generation or regeneration of the scrambling sequence

Landscapes

  • Engineering & Computer Science (AREA)
  • Multimedia (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Databases & Information Systems (AREA)
  • Physics & Mathematics (AREA)
  • Astronomy & Astrophysics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Graphics (AREA)
  • Power Engineering (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Computer And Data Communications (AREA)
  • Storage Device Security (AREA)

Abstract

本发明涉及条件存取数据的存取装置管理方法，该数据被广播给至少一个多媒体单元。存取装置由管理中心控制并且这些存取装置与时间信息相关。多媒体单元包括至少一个安全模块，其中存储对数据进行存取的存取装置。多媒体单元还包括与管理中心通信的远程通信装置和与安全模块通信的本地通信装置。该方法包括：由安全模块确定存取装置的下次更新日期；如果下次更新日期比预定持续时间更接近，则由安全模块向多媒体单元发送请求以更新存取装置，该请求利用本地通信装置；由多媒体单元将更新存取装置的请求发送到管理中心，该请求利用远程通信装置；由管理中心验证多媒体单元是否被授权更新存取装置；当得到肯定响应时向多媒体单元发送存取装置更新消息。

Description

用于管理存取条件存取数据的装置的方法
技术领域
本发明涉及用于条件存取数据的存取装置管理方法，特别地通过卫星、地面天线网络或电缆广播这种数据以传送到至少一个多媒体单元。特别地，这种数据可以是付费电视数据。
更特别地，本发明涉及当通过多媒体单元执行这种存取时，对数据的存取装置的管理，其中所述多媒体单元绑定到具有固定有效持续时间或定期更新的有效持续时间的订阅(Subscription)上。
背景技术
借助于多媒体单元存取付费电视服务的有效条件被存储在安全模块中。如所属领域技术人员所熟知的，可以基本上根据四种不同的形式来实现安全模块。其中之一是微处理器卡、智能卡，或更一般地是电子模块(采取密钥、标记(badge)等的形式)。这种类型的模块通常是可移动的并且可以连接到译码器上。电触点的形式是使用最广泛的形式，但是不排除没有触点的连接，例如，ISO 14443型。
第二种已知的形式是通常受限并不可移动地置于译码器中的集成电路箱。一种可替换的形式是由安装在基座或如SIM模块连接器的连接器上的电路制成的。
在第三种形式中，将安全模块集成到还具有另一种功能的集成电路箱中，例如译码器的解扰模块中或译码器的微处理器中。
在第四种实施例中，安全模块不是作为硬件生产的，而是仅以软件的形式实现其功能。假设在上述四种情况下，尽管安全等级不同，但是其功能是相同的，我们可以不考虑实现安全模块功能的方法或者这种模块可以采取的形式，来讨论安全模块。
例如前面提到的关于付费电视服务的存取条件可以是例如持续时间或点数(credit)。在具有确定的持续时间的订阅的情况下，特别地当这种持续时间相对较长时，例如一年，就不希望在整个订阅持续时间内将权限或存取装置引入到安全模块中。相反地，希望仅在整个持续时间的一部分时间中引入权限或存取装置。例如，对于持续时间为一年的订阅来说，可以引入时间为一个月的权限。明显地是，在此部分的持续时间到期之前，必须更新相关的多媒体单元的权限或存取装置。
引入与一部分的订阅相关联的权限和存取装置可以防止订阅者在相对较短的使用期后取消他的/她的权限，同时例如通过关闭多媒体单元一段时间来管理这种多媒体单元，使其并不接收打算发送到这种单元的权限取消消息。应该注意例如用在下述描述中的术语“存取装置”还包含了存取权限的意思，也就是说能够解密数据所必需的权限和解密数据所必需的密钥。可以利用这里所提到的密钥来直接解密数据，或者更一般地以间接的方式解密数据。这就意味着所讨论的密钥允许对消息(例如控制消息ECM)进行解密，所述消息包含例如以控制字的形式允许对数据进行解密的密钥。
还存在通常为可移动的安全模块，所述安全模块在预定的持续时间内将存取权限给予事件，同时该安全模块需要接收权限的更新消息，以继续接收事件或内容。因此，这种类型的模块给予事件6个月的存取持续时间，但是出于安全原因，需要在所有的30天中都接收权限确认消息(或权限延期)。由于存在这种类型的模块，管理中心就不知道必需发送更新消息的日期。实际上，延期日期依赖于用户最初激活他的/她的安全模块的日期。
对现有系统来说，每当与多媒体单元相关的部分有效持续时间达到最终期限时，管理中心就必需发送存取装置的更新消息。这些消息是以授权消息EMM的形式发送的。
这种类型的消息产生一个问题。实际上，许多多媒体单元仅当其处于激活状态时才能够处理这些授权消息，也就是说仅当其不被关闭也不处于待机状态时，才能够处理这些授权消息。
为了保证大多数多媒体单元正确地接收将要发送给它们的授权消息，就需要多次重复发送这种类型的消息。这就不是最优地利用有效带宽。而且，由于目前在多媒体单元和管理中心之间存在的调制解调器反向信道是相当不合需要的，特别是由于必需在多媒体单元的附近连接调制解调器，因此，通常没有提供用来指示管理中心哪个多媒体单元已经正确地接收到权限更新消息的装置。
在发送更新消息期间，当不使用多媒体单元时会出现另一个问题。假设该多媒体单元尚未接收到需要的存取装置，则该多媒体单元将不再能够起作用。这就迫使订阅者呼叫管理中心，以便明确地将授权消息发送给他/她。
现有装置不允许最优地管理更新消息，它们包含不正确地利用资源，并且在该单元于某段时间中未被使用的情况下，会对使用者造成不便。
本发明旨在通过执行下面的处理来克服现有技术处理的这些缺点：其中不需要重复几次多余的消息并且因此可以最优化授权消息的管理。
发明内容
本发明的目的是通过一种用于条件存取数据的存取装置管理方法实现的，所述数据被广播给至少一个多媒体单元，所述存取装置由管理中心控制，并且这些存取装置与时间信息相关，
所述多媒体单元包括至少一个安全模块，在所述安全模块中存储对数据进行存取的存取装置；
所述多媒体单元还包括与所述管理中心通信的远程通信装置，和与所述安全模块通信的本地通信装置；
其特征在于，所述方法包括以下步骤：
由所述安全模块确定所述存取装置的下次更新日期；
如果所述存取装置的下次更新日期比预定持续时间更接近，则由所述安全模块向所述多媒体单元发送请求，请求更新所述存取装置，所述请求利用所述本地通信装置；
由所述多媒体单元将更新所述存取装置的所述请求发送到所述管理中心，该请求利用所述远程通信装置；
由所述管理中心验证所述多媒体单元是否被授权更新所述存取装置；
当得到肯定响应时，向所述多媒体单元发送存取装置更新消息。
根据本发明，由所述多媒体单元本身，特别是其所包含的安全模块管理对存取装置更新消息的请求。所述安全模块以下面的方式控制发送所述请求的时刻：当存在所述多媒体单元将进行操作的好机会时，能够安排发送所述更新消息。所述多媒体单元还能够向所述管理中心发送接收消息，所述接收消息指示所述更新消息已经被正确地接收。这就防止所述管理中心发送不必要的更新消息。
当一组多媒体单元的有效持续时间到期时，例如在一个月结束前几天，还能够以传统的方式广播存取装置更新消息。可以采用本发明的处理向所述管理中心发送确认消息。这就能够利用本发明的处理，以传统的方式将权限更新消息仅发送到还没有接收到这些消息的多媒体单元。这不仅保证了管理中心不会发送大量不必要的消息，而且保证了多媒体单元甚至在长期未被使用后继续工作。
附图说明
参照附图和对具体实施例的详细描述，将更好地理解本发明和其优点，其中：
图1表示允许执行本发明的处理的元件；以及
图2示意性地表示本发明的处理的步骤。
具体实施方式
参照这些附图所示，根据本发明的处理是借助于基本上包含三个实体的系统执行的，其中所述三个实体是：连接到条件存取数据提供商的管理中心CG、利用所述条件存取数据的多媒体单元STB，以及所述管理中心与所述多媒体单元之间的远程通信装置ST。远程通信装置能够利用通信卫星，所述通信卫星能够与和该卫星相连的管理中心CG和多媒体单元STB进行双向通信。这些通信装置还可以利用地面天线网络并传输符合DVB-T(数字视频广播-地面)标准或DVB-H(数字视频广播-手持)标准的数据。通常，在反馈信道通常为点对点信道时，以广播模式将事件传输到多媒体单元(也就是说将相同的内容发送到许多单元中)。在这种情况下，返回通信信道能够根据GSM标准(全球移动通信系统)或GPRS(通用无线分组业务)或其它类似的标准，利用传统的调制解调器或通信设备。远程通信装置也可以利用电缆网络。
在本发明的优选实施例中，对数据的存取与以订阅的形式获得的权限或存取装置有关。在下面的描述中，假设该订阅有总共为一年的持续时间，以分为几部分时间的方式引入权限，其持续时间例如为一个月。在传统方式中，这些权限存储在连接到多媒体单元的安全模块SC中。
参照图2所示，本发明的处理是以下面的方式执行的。根据预定准则，例如当多媒体单元在暂停状态之后激活时，该单元验证其是否仍然有存取数据的权限或存取装置。当得到肯定的响应时，该单元则验证被分成小部分的权限何时到期。这相应于附图标记20中的步骤。接着在步骤21中，该单元将距存取装置的下次更新到期时所剩的持续时间与预定阈值，例如48小时进行比较。如果比较结果表示下次更新的最终期限远于该阈值，则多媒体单元以传统的方式工作。相反，如果比较结果表示更新的最终期限近于该阈值，则生成更新请求。
首先，通过安全模块来生成该请求，其中安全模块借助于本地通信装置将该请求传送到多媒体单元。这相应于步骤22。接着在多媒体单元进行修改、处理以及准备后，将该请求传送到管理中心。这个步骤可以参考步骤23。为此，多媒体单元利用经过通信卫星的远程双向通信装置、地面天线网络的天线或电缆。该请求包含多媒体发出单元和认证元件中的至少之一的标识符。有益地用普通的文字发送所述标识符，从而管理中心能够确定消息的来源。然而，还可以借助于连接到管理中心的所有多媒体单元所共用的密钥来加密该标识符。优选地借助于从管理中心和多媒体单元得知的密钥来加密所述认证元件。有益地，所述密钥是每个多媒体单元所特有的。所述密钥可以是对称的或非对称的。该认证元件可以是加密的标识符。用这种方式，当管理中心接收消息时，用普通文字表示的标识符允许得知消息的来源，这就允许例如从管理中心中存储的密钥表中，确定相应于所述多媒体发出单元的密钥。如果认证元件相应于加密的标识符，则借助于相应的密钥在管理中心中加密以纯文本表示的标识符，并且将该标识符与远程通信装置接收的认证元件进行比较。明显地是也可以采用其它认证程序，例如借助于散列函数。这种认证过程相应于图2中的步骤24。
在步骤25中，当管理中心已经确定并认证发出请求的多媒体单元时，则验证与该多媒体单元相关的权限。这些权限被存储在管理中心的数据库中，并指示订阅的总持续时间，以及部分的或分为几部分的持续时间和能够执行分为几部分的更新的起始日期。如果满足进行更新的条件，也就是说具体地如果订阅的总的持续时间尚未到期，则在步骤26中能够将新的存取装置传送到进行请求的多媒体单元。
可以以两种不同的模式发送这些存取装置。根据其中之一，将存取装置插入到被广播到所有单元的数据流中。可以由全局密钥或所讨论的多媒体单元特有(尤其是其安全模块特有)的密钥来加密这种类型的消息。所讨论的多媒体单元是唯一能够为了提取存取装置，也就是说具体的权限或密钥，而处理消息(多个消息)的单元。
根据第二种方法，通过点对点连接发送存取装置，其中的连接在多媒体单元和卫星、地面天线网络的天线或电缆之间形成。因此，只有相应的多媒体单元单独接收需要的授权消息。
当多媒体单元已经接收到包含存取装置的授权消息EMM时，可能在多媒体单元进行处理之后由本地通信装置将这些授权消息传送到安全模块。这样授权消息就被存储在该安全模块中。
如果不满足更新条件，即发出请求的多媒体单元不再处理更新其订阅的权限，则可能有两种不同的实施例。根据一个实施例，管理中心不向多媒体单元发送任何消息。参考步骤27，根据另一个实施例，管理中心向多媒体发出单元发送禁止消息。该消息还被远程通信装置传送，该消息具有防止多媒体单元重新发送更新消息，并且这种更新不再被授权的功能。这就防止了不必要消息的发送。同时能够向订阅者发送建议更新他的/她的订阅和/或解释下面的方式的消息。
根据一个有益的实施例，当多媒体单元已经接收到消息(不管该消息是更新消息还是禁止消息)，并且能够正确地处理该消息时，所述单元通知管理中心。为此，在步骤28中，多媒体单元利用与发送请求相同的通信信道来发送确认消息。如果在步骤29中，管理中心已经接收到被验证的确认消息，则处理终止，并以传统方式执行对数据的存取，这个处理相应于步骤30。如果没有接收到确认消息，则重复发送该消息直到发送确认消息为止。所述消息可以是存取装置的更新消息或禁止消息。这种确认消息的发送防止了管理中心重复多次发送已经被接收到的消息。
参考现有技术的处理，本发明包括几个优点。实际上，委托多媒体单元而不是管理中心来管理更新消息的发送，允许实现以比现有技术系统中的速率大得多的连续的速率接收更新消息。实际上，能够使得多媒体单元在其每个激活期间验证下次更新到期日期。如果在该激活的很短时间后发送更新消息，则该消息就非常可能被处理。实际上，多媒体单元肯定仍然在工作中。而且，当大多数消息都能被正确地处理时，使用双向通信装置就可以仅检测未被正确地接收的消息。这就防止发送许多不必要的消息。

Claims (8)

1.一种用于条件存取数据的存取装置管理方法，所述数据被广播给至少一个多媒体单元，所述存取装置由管理中心控制，并且这些存取装置与时间信息相关，
所述多媒体单元包括至少一个安全模块，在所述安全模块中存储对数据进行存取的存取装置；
所述多媒体单元还包括与所述管理中心通信的远程通信装置，和与所述安全模块通信的本地通信装置；
其特征在于，所述方法包括以下步骤：
由所述安全模块确定所述存取装置的下次更新日期；
如果所述存取装置的下次更新日期比预定持续时间更接近，则由所述安全模块向所述多媒体单元发送请求，请求更新所述存取装置，所述请求利用所述本地通信装置；
由所述多媒体单元将更新所述存取装置的所述请求发送到所述管理中心，该请求利用所述远程通信装置；
由所述管理中心验证所述多媒体单元是否被授权更新所述存取装置；
当得到肯定响应时，向所述多媒体单元发送存取装置更新消息。
2.如权利要求1所述的存取装置管理方法，其特征在于，所述存取装置是与存取所述数据有关的权限。
3.如权利要求1所述的存取装置管理方法，其特征在于，所述存取装置包括至少一个允许解密所述数据的密钥。
4.如权利要求1-3中任一项所述的存取装置管理方法，其特征在于，所述方法包括发送禁止消息的步骤，其目的在于防止所述多媒体单元发送新的存取装置更新请求，当所述存取装置通过所述管理中心执行的验证步骤已经指示所述多媒体单元未被授权以更新所述存取装置时，执行该发送步骤。
5.如权利要求1-4中任一项所述的存取装置管理方法，其特征在于，所述存取装置更新请求包含至少一个已发出所述请求的所述多媒体单元的标识符。
6.如权利要求1-5中任一项所述的存取装置管理方法，其特征在于，所述存取装置更新请求包含至少一个认证元件，所述认证元件允许对已发出所述请求的所述多媒体单元进行认证。
7.如权利要求1-6中任一项所述的存取装置管理方法，其特征在于，当所述多媒体单元已经接收到所述存取装置更新消息时，所述多媒体单元通过所述远程通信装置向所述管理中心发送确认消息，并且所述管理中心重复发送所述存取装置更新消息，直到所述管理中心已经接收到所述确认消息为止。
8.如权利要求1-7中任一项所述的存取装置管理方法，其特征在于，由卫星广播所述数据，并且所述远程通信装置和所述管理中心使用所述卫星。
CN2005800311777A 2004-09-17 2005-09-15 用于管理存取条件存取数据的装置的方法 Expired - Fee Related CN101023664B (zh)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
EP04104509.7 2004-09-17
EP04104509A EP1638331A1 (fr) 2004-09-17 2004-09-17 Procédé de gestion de moyens d'accès à des données à accès conditionnel
PCT/EP2005/054586 WO2006030021A1 (fr) 2004-09-17 2005-09-15 Procédé de gestion de moyens d'accès à des données à accès conditionnel

Publications (2)

Publication Number Publication Date
CN101023664A true CN101023664A (zh) 2007-08-22
CN101023664B CN101023664B (zh) 2012-09-19

Family

ID=34929590

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2005800311777A Expired - Fee Related CN101023664B (zh) 2004-09-17 2005-09-15 用于管理存取条件存取数据的装置的方法

Country Status (15)

Country Link
US (1) US7995755B2 (zh)
EP (2) EP1638331A1 (zh)
KR (1) KR101254816B1 (zh)
CN (1) CN101023664B (zh)
AR (1) AR050747A1 (zh)
AT (1) ATE427626T1 (zh)
BR (1) BRPI0515677A (zh)
CA (1) CA2579341C (zh)
DE (1) DE602005013680D1 (zh)
ES (1) ES2323510T3 (zh)
IL (1) IL181495A0 (zh)
MX (1) MX2007003000A (zh)
PT (1) PT1792484E (zh)
TW (1) TW200627857A (zh)
WO (1) WO2006030021A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101874406B (zh) * 2007-11-26 2012-05-23 纳格拉影像股份有限公司 用于评估存储在安全模块中的用户权限的方法

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100344160C (zh) * 2004-07-21 2007-10-17 华为技术有限公司 一种获取用户在线信息的实现方法
EP1739872B1 (en) 2005-06-28 2009-05-06 Nortel Networks Limited Method for securing a transmission in an hybrid network, associated system and mediation platform
US8448212B2 (en) * 2005-12-02 2013-05-21 Nokia Corporation Combined receiver for DVB-H and DVB-T transmission
US8243923B2 (en) * 2006-12-13 2012-08-14 The Directv Group, Inc. Method and system for providing a predeactivation warning in a system having a conditional access authorization expiration in a mobile receiving device
KR100865379B1 (ko) * 2007-11-06 2008-10-24 주식회사 케이티프리텔 기간제 유료 컨텐츠의 유효기간을 연장하는 방법, 이를수행하는 기간제 유료 컨텐츠 제공 시스템 및 단말장치
EP2124439A1 (fr) 2008-05-21 2009-11-25 Nagravision S.A. Méthode d'allocation et de gestion d'abbonements de réception de produits télédiffusés
EP2405650A1 (en) * 2010-07-09 2012-01-11 Nagravision S.A. A method for secure transfer of messages
EP2566157A1 (en) 2011-09-02 2013-03-06 Nagravision S.A. Method to optimize reception of entitlement management messages in a Pay-TV system
US10728043B2 (en) * 2015-07-21 2020-07-28 Entrust, Inc. Method and apparatus for providing secure communication among constrained devices

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4719566A (en) * 1985-10-23 1988-01-12 International Business Machines Corporation Method for entrapping unauthorized computer access
US5796829A (en) * 1994-09-09 1998-08-18 The Titan Corporation Conditional access system
GB2332345B (en) * 1997-12-09 2002-12-11 Sony Uk Ltd A digital video receiver a conditional access module and a method of transmitting data therebetween
EP1097589B1 (en) * 1998-07-17 2007-06-20 Thomson Licensing A conditional access system for broadcast digital television
EP1109405A1 (en) * 1999-12-16 2001-06-20 CANAL+ Société Anonyme Communication with receiver/decoder
KR100456162B1 (ko) * 2002-12-14 2004-11-09 한국전자통신연구원 디지털 케이블 티비 제한수신시스템에서 키 업데이트 방법

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101874406B (zh) * 2007-11-26 2012-05-23 纳格拉影像股份有限公司 用于评估存储在安全模块中的用户权限的方法

Also Published As

Publication number Publication date
EP1792484B1 (fr) 2009-04-01
ATE427626T1 (de) 2009-04-15
EP1792484A1 (fr) 2007-06-06
EP1638331A1 (fr) 2006-03-22
WO2006030021A1 (fr) 2006-03-23
PT1792484E (pt) 2009-05-19
AR050747A1 (es) 2006-11-15
MX2007003000A (es) 2007-07-25
TW200627857A (en) 2006-08-01
CN101023664B (zh) 2012-09-19
CA2579341A1 (en) 2006-03-23
KR101254816B1 (ko) 2013-04-15
IL181495A0 (en) 2007-07-04
US7995755B2 (en) 2011-08-09
KR20070056083A (ko) 2007-05-31
BRPI0515677A (pt) 2008-07-29
DE602005013680D1 (de) 2009-05-14
ES2323510T3 (es) 2009-07-17
CA2579341C (en) 2015-02-17
US20060064443A1 (en) 2006-03-23

Similar Documents

Publication Publication Date Title
CN101023664B (zh) 用于管理存取条件存取数据的装置的方法
KR100838892B1 (ko) 조건부 액세스를 위한 방법 및 시스템
CN1153465C (zh) 防止欺诈性接入一个条件接入系统的方法和装置
CN101141246B (zh) 一种业务密钥获取方法和一种订阅管理服务器
CN1643924A (zh) 智能卡适配协议
CN1303538C (zh) 用于在移动网络中分发加密数据的方法和系统
CN102761784A (zh) 加扰内容的存取的控制方法
CN103975604B (zh) 用于处理数字广播传输流的方法和多媒体单元
CN102317947A (zh) 用于有效分配访问授权信息的方案
US9277259B2 (en) Method and apparatus for providing secure internet protocol media services
US20040257470A1 (en) System for receiving broadcast digital data comprising a master digital terminal, and at least one slave digital terminal
CN101507272A (zh) 用于保护广播消息的安全模块的撤销方法
MXPA05005670A (es) Mensaje sobre una red de telefono movil, para redes digitales de multimedia.
CN100438617C (zh) 付费电视、在这种系统中撤销权利的方法、相关的解码器和智能卡
CN100499470C (zh) 移动多媒体广播中实现预付费业务的系统和方法
KR100966413B1 (ko) 브로드캐스터로부터 특정 서비스로의 액세스 제어 방법
CN101631227A (zh) 用于解密加密服务的系统和方法
US9961384B2 (en) Method and a security module configured to enforce processing of management messages
KR100693748B1 (ko) 이동 통신 망을 통한 ｅｍｍ 전송 방법 및 시스템
US20050188398A1 (en) Process for managing the handling of conditional access data by at least two decoders
US20050114698A1 (en) Remote control protocol for a local action to generate a command message
CN101331767A (zh) 加扰内容的存取的控制方法
EP2747443B1 (en) Method to enforce processing of management messages by a security module
EP3158769A1 (en) Method and apparatus for providing secure internet protocol media services
CA2556617A1 (en) Method for management of data processing with conditional access by means of at least two decoders

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20120919

Termination date: 20180915

CF01 Termination of patent right due to non-payment of annual fee