JP3023161B2 - Broadcast reception control method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Industrial Application Field] The present invention provides a pay-broadcast system in which a plurality of broadcasters can take a business form such as a unique billing system, and have high security and confidential information. It is intended to solve the problem of key management and key management, and to provide a reception control method in which the receiver can easily operate.

[Summary of the Invention]

The present invention scrambles the signal and broadcasts it so that the broadcasted signal can be received only by, for example, a person who has made a contract for reception, and sends key information for restoring the signal to the person who has made the contract. In a pay-broadcasting system that enables reception, a plurality of broadcasting companies can adopt a business form such as a unique billing system, which is highly secure and can be kept secret between the broadcasting companies and receiver manufacturers. An object of the present invention is to solve the problem of information and key management, and to provide a reception control method in which a receiver can easily operate.

Such a reception control method can be realized by using a removable security module, for example, an IC card with a built-in CPU, for processing based on a secret encryption algorithm or a key in the receiver. If the IC card is exchanged or the contents are rewritten in order to distribute key information that is updated in a short period of time (for example, a key that changes every month) and the contract details of each person, there is still a problem that operation costs will increase. ing.

The present invention provides a reception control method capable of solving this problem, wherein a removable security module such as an IC card with a built-in CPU and a medium for distributing secret information to be updated in a short period of time are provided separately.

By using this method, a secure and easy-to-manage method can be adopted for the essential part of confidential information management, and a medium that is low in cost for daily operation can be used. It is possible to realize a simple pay broadcast reception control system. This system is applicable to any pay system such as television, high-definition television (high definition television), and various data broadcasting. It is suitable.

[Conventional technology]

In the pay broadcast system, a broadcast signal is scrambled and broadcast so that only the subscriber can view the broadcast, and a key for restoring the descrambling (descrambling) is separately provided to the subscriber. To restore. There are various methods for scrambling a signal, which are not directly related to the present invention. For example, in a television broadcast by a broadcasting satellite or a high-definition television (hi-vision) broadcast, for a video signal, a line rotation method that disturbs a screen in a horizontal direction is used. (Scanning line signal switching method), vertical perturbation line permutation method (scanning line transition method), and a method of adding a pseudo-random signal (hereinafter referred to as PN signal) sequence to a digitized signal for audio signals. Used.

If this scrambling method is fixed for a long time, it may be decoded by observing the signal in detail, so that it is necessary to change the method in a relatively short time (for example, about 1 second). This change is controlled by the scrambling key (hereinafter abbreviated as K _s), the information is transmitted to the scrambler. The sender and receiver will generate the same PN signal based on the K _s, scrambles and descrambles the broadcast signal.

Since the K _s it is necessary to control the broadcast signal in real time, typically sent in the same transmission path as the broadcast signal. Therefore,
Since it is easily known to a third party, it is sent after being encrypted with another key. This key is called a work key (hereinafter abbreviated as K _w ). If this K _{w is} also fixed, it may be broken, so it is necessary to change it at intervals of, for example, one month or one year. As a medium for transmitting K _w to the receiver, the same transmission path (radio wave or the like) as a broadcast signal, a physical medium such as an IC card or a magnetic card, or a wired medium such as a telephone line is used.

Here, especially when sending a third party such as radio waves in the transmission path and easy access, the master key Koyu each contractor (hereinafter K _m
And transmitted.

In the case of the above system configuration, K _w
, The reception can be controlled. It should be noted that the above-mentioned various keys and information for performing descrambling by determining with the receiver whether or not the program being broadcast matches the contract contents of each receiver are collectively referred to as related information. This includes, according to the information indicating the program of the attributes in the broadcasting and key K _s such as "program information", or stopped by the broadcast wave the de-scrambling function of the particular receiver, for or to restart " Control information "and" individual information "based on information indicating the key _Kw and the contract content of each recipient. Here, the "program information", "control information" is encrypted by key K _w, is transmitted in the form that can not be distinguished from the outside.

When transmitting these related information by broadcast waves, for example,
In satellite television broadcasting and high-definition broadcasting, packets are transmitted in data channels.

Further, data broadcasting for providing services by transmitting various digital signals has been developed. In data broadcasting, services are provided by sending character signals, facsimile signals, various software, coded music performance information, and other various data signals. In this case, it is conceivable that the scrambling method suitable for each signal is different, and it is also conceivable that the business form is also different, so that it may not be appropriate to unify the pay method. However, it is desirable that the operations of the receiver and receiver be unified as much as possible.

Here, signals of various data broadcasting services are unified and transmitted in the form of a packet (having the same configuration as the packet of related information of the pay method of the television broadcasting). In the case of pay broadcasting, a part of the packet of the data broadcasting signal is generally scrambled (encrypted), and related information for restoring the data is transmitted before the transmission of the data signal. .

Next, there are several fee setting methods for paying broadcasters to finely collect the fees. These will be described below. That is, the following are the most suitable methods.

(1) Flat fee method For example, a fee is set and paid off on a monthly basis, and once paid, all programs (of a specified service) of the business can be viewed.

(2) Tier method The program (of the designated service) of the business is divided into a plurality of groups (called tiers) according to the type of program (for example, sports, movie, drama, etc.), time zone, and the like. This is a method in which a contract is made so that only programs in a group of programs can be viewed.
This method is used when a special number is shown at a special price.

(3) Pay-per-view method The above-mentioned (1) and (2) are flat-rate charge setting methods in which when a contract is made in advance and paid, a fee is finely collected regardless of whether the program is actually viewed or not. Is a pay-as-you-go fee setting method that pays only when actually viewed.

In the pay-per-view system, the receiver has a balance memory in the receiver, and the viewing fee is reduced every time the content is viewed so that the user can view the content for a certain period of time. At this time, a pay-per-view method is set for each program and the fee is reduced every time one program is viewed, and a fee is set for each unit time (or the number of hours that can be viewed at the unit fee is set). There is a pay-per-view method in time units.

When each broadcaster performs pay broadcasting, a specific method is adopted from various fee setting methods, and a contract with the receiver is made based on the specific method. The contract key (for example, the contract term when using the flat fee method as the fee setting method, the contract term and contract tier when using the tier method, and the prepayment when using the pay-per-view method) and the work key K _w Send to receiver's paid decoder.

When a broadcast is received, it is determined in the pay decoder whether the broadcast matches the contract details, and in the pay-per-view system, it is confirmed that there is a balance and that an input for viewing is made, and that these conditions are satisfied. Then, the user can descramble and view the program.

In the case of using broadcast waves to broadcast the contract details and K _w to the pay decoder of the receiver, individual information having the same ID number as the pay decoder was sent, having a nonvolatile memory in the pay decoder. Occasionally, decrypts the encrypted with your own mask key K _m, and writes the information in a nonvolatile memory.

In this case, the receiver's receiver must be turned on when sending information, and if a large amount of information is concentrated, a time delay occurs in transmission (depending on the capacity of the transmission line used for information transmission, 1000 If about ten thousand cases are concentrated, the order of a day may be delayed), and there may be problems in management and operation, such as the fact that several retransmissions are required to ensure transmission.

When distributing individual information using a card such as an IC card, mail the card with the contract details and K _w
It will be issued at a specific terminal. In this case, it is necessary to encrypt at K _m is a readable medium externally.

The part of the pay decoder that processes related information is composed of an integrated circuit with a built-in CPU, but it is necessary that the encryption algorithm and various key information cannot be read from the outside. If this integrated circuit is embedded in a pay decoder, it is often used because the interface with the outside becomes unnecessary and the cost of the pay decoder itself is reduced. In addition, since the secret information, such as K _m among the encryption algorithm and the key is embedded in the interior of the toll decoder, manufacturing and paid decoder, there is a need to be managed in distributed the broadcaster's side of the individual information. At this time, if there are a plurality of broadcasters, it is necessary for the receiver side to be able to receive with the same pay decoder, so common management of secret information is required between the broadcasters.

In order to solve such a problem, the part of the integrated circuit that processes the related information of the pay method should be included in an IC card or the like with a built-in CPU, and this should be a form detachable from the pay decoder body, that is, a removable security module. Is being considered. Although the reader / writer part of the IC card is added to the paid decoder body (this is just a simple contact), since there is no secret management part, mass production becomes easy and it can be sold freely at stores. ,
There is a great advantage that costs can be reduced in both manufacturing and distribution.

Broadcasters can issue IC cards with built-in processing programs for their respective business types, eliminating the need for common management of confidential information between operators.
In the event that the encryption algorithm is broken, the countermeasure can be easily taken by issuing an IC card in which the encryption algorithm built in the IC card is changed at the time of contract renewal.

In addition, an IC with a built-in CPU as part of a data broadcasting receiver
When a card is used, not only can processing for pay service reception for each service be performed, but also descrambling of data signals can be performed if the processing speed of the IC card is satisfied.
This can be done inside the IC card.

[Problems to be solved by the invention]

By the way, when processing related information in a pay-broadcast receiver is performed by an IC card with a built-in CPU, distribution of individual information to the receiver is also performed by an IC card in a basic operation mode. At this time, the IC card contains the contract contents of each subscriber, Kw, and a program for processing related information, and when renewing the contract, a card with the contract contents and Kw part rewritten is issued Is done.

As a method of renewing the contract, a new card is newly issued and distributed, or the contents of the contract and Kw are rewritten by bringing the previous card to a specific device on the broadcaster side.

Of course, if the processing program embedded in the pay decoder using radio wave addressing (distributing individual information to each pay decoder in broadcast waves) is incorporated in the IC card, radio wave addressing can be used together with the method using the IC card. . However, this is especially effective for receivers on remote islands, but as mentioned above, the limitation that the receiver must be turned on and tuned to that channel when sending individual information is solved. Since it is not possible, it will be treated here as an auxiliary function.

In such a method of distributing individual information by issuing an IC card or rewriting recorded contents of the IC card, when a pay broadcast of a plurality of broadcasters is received by a single pay broadcast receiver (pay decoder). If a different card is used for each company, if there are problems such as an increase in the number of IC cards with a built-in CPU, difficulty in standby reception such as reservation recording, etc., and information on multiple businesses recorded on one card, Problems such as complicated operation of card issuance or renewal were considered, and it was necessary to solve these problems.

As a method for solving this problem, a configuration shown in FIGS. 6 and 7 can be considered.

The configuration shown in FIGS. 6 and 7 is an embodiment of the “broadcast reception control method” filed on Oct. 11, 1990 by the present applicant. Now, when a contract for receiving a certain service is made with a certain broadcasting company, the broadcasting company and the CPU including the individual information (contract content and work key K _w ) of the service are provided.
The built-in IC card 53 is delivered. When this IC card is inserted into the reader section of the pay decoder main body 54, the related information is processed through the IC card interface circuit 22. That is, the program information is passed to the IC card 53, the restored K _s after being processed in the IC card 53 is outputted to the PN signal generator 17.

Next, when the contract is renewed, the individual information distribution means 52 including new individual information (contract content and K _w ) is received. This individual information distribution means 52 may be any of an IC card, a magnetic card, and information sent via a telephone line. The individual information included in the individual information distribution means 52 is transferred to the intermediate storage means 50 for the individual information via the individual information input interface 51.
Is stored once.

Here, the individual information input interface 51 is an IC card reader if the individual information distribution means 52 is an IC card, a magnetic card reader if the magnetic card is a magnetic card, and a telephone line modem if the information is transmitted via a telephone line.

The individual information once stored in the individual information intermediate storage means 50 is transferred to the IC card 53 via the IC card interface 22 at an appropriate time. The previous individual information is stored in the IC card 53, so if this is unnecessary, rewrite it,
Add forwarded individual information if still available.

Here, in the IC card 53, a plurality of, for example, one broadcasting company, two pieces of individual information of the current term and the next term of one service per service, and a company to which a normal viewer contracts,
The service (one using the same pay decoder) can store several times the individual information.

By the way, the individual information needs to be encrypted when it can be accessed from the outside, and needs to be encrypted when it is transferred inside the paid decoder body as in the present invention. Therefore, the encrypted individual information is stored in the individual information intermediate storage means 50 and is transferred to the IC card 53 while being encrypted. The decryption of this encryption is performed inside the IC card 53 that cannot be accessed from outside, and the decrypted individual information is stored in the IC card 53.
Is stored in

At this time, the algorithm for encrypting the individual information in the individual information distribution means 52 needs to correspond to the decryption processing program inside the IC card 53. Can be included).

The key for decrypting the encryption of this individual information is also provided by the IC card 53
, And usually uses a master key K _m unique to the receiver.

In FIG. 6, the individual information input interface 51 and
Since the IC card interface 22 is provided separately, the intermediate storage means for the individual information can be omitted by appropriately controlling them.

FIG. 7 shows a case where the individual information input interface 51 shown in FIG. 6 is the same as the IC card interface 22. Therefore, the individual information distribution means 52 described above is an IC card.

However, this IC card does not need to have a built-in CPU,
If the contacts are common, a simple memory card is sufficient.

The operation procedure and operation example in FIG. 7 are as follows.

First, as in FIG. 6, when a contract is made with a certain broadcaster to receive a certain service, an IC card 53 with a built-in CPU containing the individual information is received and inserted into the reader section of the pay decoder main body 54 for reception. I do. At the time of contract renewal, individual information distribution means 52 (hereinafter referred to as an IC memory card) including new individual information is obtained.

The IC card 53 with a built-in CPU is once discharged from the pay decoder main body 54, and the IC memory card 52 is inserted. IC memory card
The individual information in 52 is temporarily stored in the individual information intermediate storage means 50.

Next, the IC memory card 52 is ejected from the pay decoder main body 54, and the CPU built-in IC card 53 is inserted again. As in the case of FIG. 6, the individual information is transferred from the intermediate storage means 50 to the IC card 53.
Transferred to within. When receiving a plurality of broadcasters and services, the IC memory card 55 is obtained, stored in the intermediate storage means 50 for one day, and finally transferred to the IC card 53 as before.

At this time, it is easy in operation to sequentially store the individual information of the plurality of IC memory cards in the intermediate storage means 50 and then transfer the entire information into the IC card 53. It is necessary to have a capacity capable of storing a plurality of individual information. This method requires only one IC card reader,
It is practical.

As a medium of the individual information intermediate storage means 50, a normal RA
M (random access memory), EEPROM (electrically erasable rewritable read-only memory) and the like are conceivable. The power must be turned off between storing the individual information from the IC memory card and transferring it to the CPU built-in IC card.
RAM is fine, but I don't want the receiver to be aware of
To transfer the C memory card at an appropriate time and insert the IC card with a built-in CPU when receiving a program, a system that automatically transfers the data can be stored in an EEPROM, power-backed RAM, etc. Must be used.

These memories correspond to the RAM 27 included in each drawing.
It is also possible to use a ROM 26 (in the case of rewritable), but this is a problem in circuit design, and here, the description is made with a separate memory.

The transfer of the individual information is performed under the control of the CPU 25.

As described above, the processing of the related information for controlling the reception of the pay broadcast (including at least one piece of individual information) and the removable security module (typically, an IC card with a built-in CPU, hereinafter a built-in CPU) And the individual information distribution means, and the receiver sequentially transfers the information content of the individual information distribution means to the IC card built in the CPU for use. That is, FIG. 7 shows a configuration in which the individual information distribution means can share the same interface as an IC card with a built-in CPU, and FIG. 6 shows a case in which another means such as a magnetic card or a telephone line is used as the individual information distribution means. It is a structure of.

In each case, the individual information of multiple broadcasters and services is ultimately contained in a single IC card with a built-in CPU, so the recipient can receive it without any special operation except when updating the information. Becomes possible. Further, when an IC card is used as a means for distributing individual information, a simple memory card may be used as long as the information content is encrypted, so that the cost can be reduced.

Note that this method is basically to use the same processing program for the same system or broadcaster with the IC card with a built-in CPU.However, if the IC card has a large capacity and can accommodate multiple processing programs, , Easily expandable.

Since these multiple processing programs are automatically switched based on the received related information [program information], there is no need to modify the paid decoder itself, and an IC card containing information on all subscribed services and businesses Can be received simply by inserting it into the paid decoder.

By the way, the above-mentioned technology is applied to a case where an IC card with a built-in CPU is individually managed, information included in an individual information distributing means is also individually managed, and a correspondence with the IC card with a built-in CPU is taken. This is an effective method (at this time, the pay decoder main body into which the IC card is inserted does not require any individual management as described above).

That is, a secret master key is built in the IC card with a built-in CUP, and information included in the individual information distribution means distributed at the time of contract renewal is encrypted with this master key.

If this encryption is not performed and there is no one-to-one correspondence with the IC card with a built-in CPU, it is possible to transfer the information of the individual information distribution means to another IC of another pay decoder one after another. As a result, a pay broadcasting system will not be established.

As described above, in the method of individually managing the IC cards, some of the business modes of pay broadcasting are difficult to realize. One example is a pay-per-view method using a prepaid card. In order to operate like a prepaid card in pay broadcasting, first obtain and receive an IC card with a built-in CPU including some advance payment at the time of contract, purchase another prepaid card before the remaining balance runs out, The contents of the CPU built-in I
There is a method of transferring data to a C card and continuing reception.

In this case, if the card is managed individually and you want to distribute a prepayment encrypted with each recipient's mask key,
Although the problem of diversion to another receiver is eliminated, it becomes impossible to freely sell a card in which a certain amount of money is written and start business.

Of course, it is possible to issue the IC card itself with a built-in CPU (as a common master key), but this is not advisable in terms of the cost of the IC card.

Here, the IC card with a built-in CPU is designed so that its contents cannot be read out or transferred to the outside by the action of the CPU, and the IC card used for the individual information distribution medium is The contents can be transferred to the outside.

Therefore, an object of the present invention is to provide a broadcast reception control system in which an IC card with a built-in CPU and an IC card for an individual information distribution medium are separately provided to solve the problems of operation and cost and to eliminate the need for individual management of the card. To provide.

Means for Solving the Problems The present invention provides a scrambled broadcast signal, encrypted information for descrambling the scrambled broadcast signal sent together with the broadcast signal, and at least the Means for receiving individual information including key information for decrypting the encrypted information; and means for processing the encrypted information with the individual information and descrambling the scrambled broadcast signal. In the broadcast receiving control method, the encrypted information is processed, and the removable security module capable of storing the individual information and the scrambled broadcast signal loaded with the removable security module are transmitted. There is a difference between the contents of the pay broadcast decoder to be descrambled and the contents of the contract renewal. A medium containing the individual information provided separately, and transferring the contents of the medium containing the individual information to the removable security module via the pay-broadcasting decoder main body to process the encrypted information. In this case, after the contents of the medium including the individual information are transferred to the pay-broadcasting-system decoder main body, a means for modifying the contents is provided.

[Operation] In the present invention, after the contents of the individual information distribution medium are transferred to the pay decoder in the pay broadcast receiver, the contents of the individual information distribution medium cannot be reused by another pay decoder. By providing means to
For example, a business in which a card that can receive a pay broadcast can be freely gifted becomes possible, and the range of usage modes is greatly expanded.

Embodiment Next, FIG. 1 shows a first embodiment of the present invention. In this embodiment, the individual information input interface 51 is replaced with an individual information input / output interface 70 in the configuration of FIG. 6, and an information erasing means 71 is added thereto. The content of the individual information distributed by the individual information distributing means 73, such as information on a prepayment in a pay-per-view method, is stored in an IC with a built-in CPU.
When the data is transferred to the card 72 and its validity is checked in the CPU built-in IC card, the information erasing means 71 is activated, and the contents of the individual information distribution means 73 are erased through the individual information input / output interface 70. .

Here, when the individual information distribution means 73 is an IC card or a magnetic card, it must be erasable. When the individual information is distributed via a telephone line, a method is employed in which a signal is transmitted to the broadcasting station that transmits the information so as not to transmit the information again to the line.

FIG. 2 shows a configuration example when the present invention is applied to the configuration of FIG. IC card interface circuit
When the information erasing means 76 is added to 75 and the contents of the individual information distributing means 78 are transferred to the individual information intermediate storage means 79, the contents of the individual information distributing means 78 are erased by the information erasing means 76. Next, the IC card interface circuit 75
When the C card 77 is connected, the contents of the individual information intermediate storage means 79 are transferred to the IC card 77 with a built-in CPU, and when the transfer is confirmed, the contents of the intermediate storage means 79 are deleted.

In the second embodiment, it is necessary to confirm that the information has been transferred reliably. For example, after the information is transferred from the individual information distribution unit 78 to the intermediate storage unit 79, the CP is
In U25, confirmation is performed using a method such as reading out and collating both again.

FIG. 3 shows a third embodiment of the present invention, in which an identification number (hereinafter referred to as ID number) storage means 80 is added to the receiver configuration of FIG. This ID number is a number unique to the pay decoder main body. After the information is transferred from the individual information distribution means 82 to the intermediate storage means 79, it is output to the individual information distribution means 82, and the ID number is determined by the distribution means 82. It is stored in the place where it was.

Here, it is assumed that nothing is written in advance in the place where this ID number is written in the individual information distribution means 82 (in the case of a rewritable medium, a specific value is written. Is also good). Now, when reading information from the individual information distribution means 82, first read the value of the place determined to write the ID number, and write the above-described specific value whether there is nothing written. Then, the contents of the individual information are transferred to the intermediate storage means 79. At this time, if another value is written as the IC number, it is checked whether the value matches the value stored in the ID number storage means 80, and only when the value matches, the content of the individual information is compared. Is transferred, and if they do not match, it is interpreted as being once used by another receiver, and the transfer is stopped.

Here, the reason why the data is transferred when they match with each other is to allow the data to be transferred again because there is some abnormality in the previous transfer. Therefore, for example, when the information of the prepayment of the pay-per-view is read into the receiver, it is necessary to prevent double addition, but this is because the update number information is included in the individual information, and originally this is Since management is being performed, this will be used. When the content of the individual information is transferred, the ID number stored in the ID number storage means 80 is recorded in the individual information distribution means 82, and the distribution means is separated from the receiver body.

In the third embodiment, the ID number is a number unique to the pay decoder main body, but may be different from each other as in a normal serial number, and does not particularly require management. Even if a plurality of decoders have the same number, there is no problem as long as the decoders are distributed to such an extent that the receivers cannot know each other.

Conversely, an operation method that streamlines information transfer by assigning the same IC number to a group of pay decoders, paying them together, and distributing one piece of individual information distribution medium is also possible. It is. However, in this case, a function for limiting the number of transfers according to the payment amount is required.

By the way, the ID number in the pay decoder is written in advance in the pay decoder body at the time of manufacture, and is also recorded in the IC card 81 with a built-in CPU, and this is stored in the ID number storage means.
It is also possible to transfer it to 80 and use it.

Here, when writing the ID number on the distribution medium 82 of the individual information, if the location where the information is written is known, the part is erased or changed to a specific value originally, so that the same card can be written. Reuse becomes possible. For this reason, it is necessary to use a method of recording the ID number in an encrypted form by combining it with other data, or recording it in a dispersed location.

FIG. 4 shows an example of information stored in an individual information memory section in an IC card with a built-in CPU in a fourth embodiment using a receiver having the configuration of the third embodiment of the present invention, and FIG. It is an example of the information content stored in the individual information distribution means in that case. These allow a business mode in which, for example, a monthly fee is subtracted from the amount paid in advance, such as a prepaid card, when a flat fee system is used as a billing system for pay broadcasting.

When realizing a flat fee system using a prepaid card, for example, when billing is performed on a monthly basis, it is necessary to control such that once the fee is subtracted from the balance once a month, the fee is not paid until the month changes. Therefore, the CPU built-in I
The C card 83 has a one-to-one correspondence with a part for identifying a business or service, a plurality of Kw, a work key memory part in which the expiration date is recorded, a balance memory part, and a specific pay decoder main body. In this case, a memory part of the ID number and a part for storing the previous payment date are included.

Now, if a receiver uses this card to receive a flat fee broadcaster's pay broadcast, the year / month code in the program information is compared with the previous payment date in the card. Will allow you to deduct the monthly fee from the balance and receive it. In the case of the same date, since the payment has already been made, the balance can be received unchanged.

Similarly, the distribution medium 84 of the individual information in FIG. 5 includes a portion for identifying a business or a service, a work key memory portion in which a plurality of Kw and their expiration dates are recorded, a prepayment memory portion, and the like. Further, a part for storing the ID number of the pay-destination decoder at the transfer destination is included so that these information cannot be used again after the information is transferred to the pay decoder main body or the IC card having a built-in CPU. The contents of the distribution medium 84 for the individual information are transferred to the IC card 83 with a built-in CPU for use. At this time, the work key memory refers to the expiration date, the used flag, etc., and writes the used area. I will replace it.

Note that Kw recorded on the card needs to include the amount until the prepaid money is used up in advance.

By the way, in Fig. 4, the ID is also stored in the IC card with built-in CPU.
A memory part for numbers is provided. This means that individual management is not performed in the issuance of an IC card, but once it is inserted into the pay decoder itself and received, it has a one-to-one correspondence with the pay decoder itself and can be reused by other pay decoders. It is used to make it impossible.

In the flat fee system, when a fee is deducted from the balance as in a prepaid card, a method of transmitting the amount to the receiver becomes a problem. As the method, for example, the information of the viewing fee is transmitted in the program information sent along with the program, and the information of the monthly viewing fee is associated with Kw in the individual information distribution means. And the broadcaster selects and implements an appropriate one.

In the above description, the case where the billing method is the flat fee method has been described. However, in the case of the tier method, if a process for storing necessary information for each tier is provided and processing is performed, technically, the case of the flat fee method Similar and can be implemented as well.

By the way, when implementing the present invention, it is necessary to pay attention to the encryption of the individual information included in the individual information distribution media 73, 78, 82, 84 and the like. Even when an IC card is used as a medium, encryption is indispensable because a memory card without a CPU is assumed. At this time, if a different key is used for each sheet, individual management is performed, so that encryption is performed using a common key for all applications assumed in the present invention.

This point may be a problem in the future in terms of security, but since the present invention is implemented in combination with a removable security module such as an IC card with a built-in CPU, it can be solved by updating this .

[Effects of the Invention] As described above, a removable security module such as an IC card with a built-in CPU and individual information such as an IC memory card are used as a reception control method in a pay system such as a television broadcast, a high-definition broadcast, and a data broadcast. The method of separately providing the distribution means has significant operational advantages such as security and management of confidential information between broadcasters, cost problems when renewing contracts, and sharing of receivers between multiple companies and services This is a preferred method that can solve the operability problem and the like in the case of performing.

By applying the present invention to this method, the distribution means of the individual information used once cannot be diverted to another receiver, so that it can be used in a business mode in which individual management of cards is not performed. .

As a result, various new methods are possible as a business form of pay broadcasting, and a usage such as a prepaid card can be realized. When this method is applied to a pay method using the flat fee method, the following operation is performed.

First, a broadcaster sells a card that can receive the broadcast service at a store or a vending machine. This card is common to all receivers, and a person who wants to receive it can freely purchase the card, insert it into a pay decoder, and transfer the information to receive it. At this time, a plurality of types of cards with different expiration dates can be provided.

Also, when the present invention is applied to pay-per-view pay broadcasting, a card in which a certain amount of prepayment information is written is sold at a store or a vending machine, etc. Purchase and receive. At this time, the prepayment information in the purchased card is
The information is transferred to a card or the like and added to the balance information therein. When a viewing confirmation button is pressed when receiving a broadcast, the viewing fee is reduced from the balance information on a per-program or per-hour basis, and the broadcast can be received.

Such a function enables applications such as gift cards. In the case of a gift card, a method that does not specify the receiving decoder of the other party is easily used, and the function of the present invention is required. The usage method such as this gift card can be easily applied in the case of the pay-per-view method.
By using the method as described in the embodiment, the present invention can be applied to pay broadcasting by the flat fee method, and the business form of the pay broadcasting is further expanded.

In the case of the flat fee method, it is unnecessary if the reception fee for the month has already been paid when the card is given, but according to the present invention, it can be used after the next month, so it can be used as a gift Will be available.

[Brief description of the drawings]

FIG. 1 is a diagram showing a first embodiment of a receiver configuration according to the present invention, FIG. 2 is a diagram showing a second embodiment of a receiver configuration according to the present invention, and FIG. 3 is a receiver configuration according to the present invention. FIG. 4 is a diagram showing an example of information content related to individual information stored in an IC card with a built-in CPU according to a fourth embodiment of the present invention, and FIG. FIG. 4 is a diagram showing an example of the information content stored in the individual information distribution means corresponding to FIG. 4, FIG. 6 is a diagram showing a first example of a receiver configuration which is a background of the present invention, and FIG. FIG. 10 is a diagram illustrating a second example of a receiver configuration serving as a background of FIG. 1 Broadcast signal 2,3 Separation circuit 4 Video descrambler 5 Audio descrambler 17 PN signal generator 18 Reconstructed video signal 19 Reconstructed Audio signal, 21 ... data channel interface circuit, 22 ... IC card interface circuit, 24 ... PN generator interface, 25 ... CPU, 26 ... ROM, 27 ... RAM, 50 ... intermediate storage means, 51 …… Individual information input interface, 52,55 …… Individual information distribution means, 53 …… IC card with built-in CPU, 54… Paid decoder body, 70 …… Individual information input / output interface, 71 …… Information erasing means, 72 …… IC card with built-in CPU, 73 …… Individual information distributing means, 75 …… IC card interface circuit, 76 …… Information erasing means, 77 …… IC card with built-in CPU, 78 …… Individual information distributing means, 79 …… Intermediate Storage means, 80: ID number storage means, 81: CPU Built-in IC card, 82 …… Individual information distribution means.

──────────────────────────────────────────────────続 き Continuation of the front page (56) References JP-A-60-183888 (JP, A) JP-A-61-116486 (JP, A) JP-A-63-219244 (JP, A) JP-A-59-1983 152746 (JP, A) (58) Field surveyed (Int. Cl. ⁷ , DB name) H04N 7/10 H04N ^7/ 14-7/173 H04N ^7/ 20-7/22

Claims (3)

(57) [Claims] 1. Decrypting a scrambled broadcast signal, encrypted information for descrambling the scrambled broadcast signal sent together with the broadcast signal, and at least the encrypted information separately sent Means for receiving individual information including key information for, and means for processing the encrypted information according to the individual information and means for descrambling the scrambled broadcast signal, A removable security module that processes the encrypted information and can store the individual information; a pay-broadcast decoder main body that loads the removable security module and descrambles the scrambled broadcast signal And a medium containing the individual information with different contents at the time of contract renewal Are separately provided, and when the content of the medium including the individual information is transferred to the removable security module via the pay-broadcasting decoder main body, the encrypted information is processed. A broadcast reception control system characterized in that a means for transforming the contents of the medium including the contents after transferring the contents to the main body of the pay broadcast system decoder is provided. 2. The broadcast receiving control system according to claim 1, wherein said means for modifying the contents of the medium including the individual information erases the contents. 3. The medium according to claim 1, wherein said means for transforming the contents of the medium containing the individual information adds an identification number given to the pay-broadcasting system decoder body to the contents of the medium. Broadcast reception control system.