MXPA06006309A - Broadcast conditional access system with impulse purchase capability in a two-way network - Google Patents

Abstract

The invention relates generally to an apparatus and a method for securing impulse program purchases from conditional access network broadcast systems. The invention include providing entitlement codes to a set top boxe having security modules, located at a customer's corresponding program listening and viewing system. A customer desiring to makes an impulse purchase communicates the request to a broadcast system. In one embodiment of the invention, a message from the customer's access device transmits to a broadcast system's headend to indicate the desired purchase. In response to receiving an impulse purchase signal, the headend creates and sends an authorization code that thereafter authorizes the set top box to decode the impulse purchased program when it is received. The authorization code for a given impulse purchased program is only transmitted to set top boxes that actually purchase the program in contrast to the prior art system, where the decryption codes for impulse purchases are pre loaded into the security module before the event is purchased. The invention also generates data required for a billing record and transmits this data to a billing center.

Description

TRANSMISSION CONDITIONED ACCESS SYSTEM WITH PURCHASE CAPACITY BY IMPULSE IN A NETWORK OF TWO ROUTES FIELD OF THE INVENTION The invention relates in general to a method and apparatus for a multi-channel video programming distributor (MVPD) system that provides conditioned access multimedia programming.

BACKGROUND OF THE INVENTION A subscriber transmission system includes in part, a main endpoint from which the programs of the service provider and the transcoders that receive the selected programs are transmitted, with the ultimate purpose of listening and viewing the programs. Typically, the events are transmitted and then viewed based on a monthly subscription, a pay-per-view transmission program and, in some cases, an impulse purchase, where the client decides to watch the program with a short time of program difference. that is being transmitted. The current impulse purchase systems store, in advance of purchases, passwords in a security module located in the transcoder that can decode all the services that the customer wants to buy. When the customer makes a purchase, the security module stores a record of the purchase, and uses the key that had previously acquired, often at the beginning of the monthly subscription, to allow the customer to see the requested program. Later, the security module creates a two-way communication channel with a billing center and transmits the billing information back to the service provider. The prior art shown in Figure 1 illustrates a typical conditioned access system, which uses a main end and a transcoder. U.S. Patent 6,510,519 also provides a complete description of a typical conditioned access system. In general, the transcoder includes tuners, demodulators, decoders, transport demultiplexers, microprocessors, program memories, video image memories, MPEG video decoders, displays and smart cards. Most data streams of the digital transmission system are encoded or scrambled for security purposes. The subscriber receives a control message of ownership that includes control words, which the transcoder needs to decrypt, in order to form a decryption key that allows the encoded audio and video signals to be assembled for consumption. The decryption control words are processed by algorithms programmed into the transcoder of the client. Typically, a 56-bit decryption key is stored in transport records for future decryption and data sorting. Once ordering occurs, the system constructs a composite image of video in memory, typically in compliance with the MPEG-2 standard, and displays the desired image on a screen. In addition to ordering the program, authorizations are generally provided to ensure that the particular transcoder has been enabled to receive a program or group of programs. The authorization to view certain programs is transmitted with the program or by a separate communications channel, for example, an out-of-band RF link, to the transcoder. For example, the authorization information may include a key to the service and an indication of the programs in the service that the subscriber has the right to see and hear. When the authorization information indicates that the subscriber is authorized to view the program, then the generator of the control words uses the decryption key together with the transmitted information to generate a control word. When the programming subscription purchase occurs, the service provider transmits an authorization code to the transcriber of the subscriber, in order to carry out the subsequent decryption as required. These dates, which constitute the authorization information are stored in a security module. Various techniques are used to stir the content of a program and the associated ownership management messages. However, current transmission systems do not transmit impulse purchase authorization codes in a two-way communication channel from the customer's equipment, typically as a transcoder, to the main end. This lack of two-way communications gives some insecurity, since a pirate can steal the programs. The current impulse purchase systems store the decryption keys in security modules in the client's transcoder, which later, decode the services that a customer can buy. When a customer makes a purchase that has been preprogrammed in the security module, the security module typically stores a record of the purchase and uses the decryption key it already has to allow the customer to view the purchased material. Then, the security module can be configured to create a two-way communication channel with a billing center and thus, can transmit the billing information back to the service provider. When a pirate steals the signal from the security module and decodes the decryption keys, the pirate can obtain the programs and other services without paying. Also, the pirate can buy a program, but release the compare record before it is transmitted to the billing center, so it will avoid payment.

BRIEF DESCRIPTION OF THE INVENTION A secure network includes a proprietary management message generator (EMM) located at the main end, which is used to provide program codes to the distribution of transcoders having security modules located where it is located. the audio and visualization system of the client. When a customer makes an impulse purchase, the customer communicates the selection, as in the preferred embodiment, to a transcoder, which causes the message to be transmitted to a main end indicating the desired purchase. In response to receiving an impulse purchase signal, the main end creates a message, such as an EMM, which sends a decryption code which then authorizes the transcoder to decode the purchased program by impulse when it is received. In response to the request, the main end also generates a billing record and transmits the billing record to a billing center. The authorization codes for a program purchased by specific impulse are transmitted only to the transcoders that actually bought the program, contrary to the previous systems, where the authorization codes for impulse purchases were loaded into the security module before that the event was purchased. The invention described herein relates to an access device, which comprises: a means for receiving a program by impulse, a means for indicating a purchase by desired impulse; a means to communicate the purchase by desired impulse; a means to receive the authorization that responds to a message indicating impulse purchase, and stores the specific authorization codes for the purchased program. The invention also generates the data required for a billing record and transmits this data to the billing center. The invention described herein includes a method for providing the impulse buyer with a secure means to purchase a program, the method comprising the steps of: making an impulse purchase, using a means to receive the program; transmitting a message indicating the desired purchase, from a security means located in the middle to receive the program, to a principal end means to control the transmission and reception of the data used in the provision of the program through the management message of ownership; generate a billing record, direct a specific decryption medium for the purchased program; and finally, transmit the decryption medium to the device, where it is located in the security module.

BRIEF DESCRIPTION OF THE DRAWINGS The invention will be better understood from the following detailed description when read together with the accompanying drawings. The different characteristics of the drawings are not specified exhaustively. On the contrary, the different characteristics can be expanded arbitrarily or reduced for clarity. In the drawings are the following Figures: Figure 1 is a block diagram of a conditioned access system of the prior art. Figure 2 is a block diagram of the invention to ensure an impulse purchase program. Figure 3 is a method for securing an impulse purchase program.

DETAILED DESCRIPTION OF THE INVENTION The prior art, shown in Figure 1, provides an explanation of a system 105 of the service provider that provides multimedia programming. Most data streams of the digital transmission system are encoded or scrambled for security purposes, to ensure that only authorized subscribers can watch the transmitted programs. In a digital transmission system based on the subscriber, the client receives a ownership management message (EMM), which contains the necessary information to generate a control word necessary to allow the decryption and assembly of the audio data and digital video The decryption control words are processed by algorithms programmed in a transcoder 115 (typically, on a smart card), which generate a N-bit decryption key. Current systems typically use keys as long as 56 bits. The 56-bit keys are stored in transport records for another decryption of program data. Once decryption occurs, the system constructs a composite image of video in memory, typically in compliance with the MPEG-2 standard, and displays the desired image on a screen.

The coding of the digital transmission system is achieved by transmitting and receiving a control word 116 as a packet containing the decryption specifications in the form of input data. When the service provider broadcasts a program, it scrambles the content 111 of the program. The transcoder 115 determines whether the scrambled program 111 should be deciphered. When it is determined, based on the authorization codes, that the program is one that the customer has purchased, then the transcoder 115 proceeds to decrypt the program and leaves it available for viewing. The transcoder 115, which includes a decoder 117, which uses the control word 119 as a key to decrypt the scrambled programs. The control word 119 is produced by a word generator 131 from the information contained in the entitlement control message 109 and the information from the authorization information 123 stored in the transcoder 115. For example, the authorization information 123 It can include a key for the service and an indication of the programs in the service, for which the subscriber has the right to see. When the authorization information 123 indicates that the subscriber is entitled to view the scrambled program 111, the control word generator 131 uses the decryption key together with the information from the ECM 109 to generate the control word 119. A new control word 119 is generated for each new ECM The authorization information used in a particular transcoder 115 is obtained from one or more EMM 113 addressed to the transcoder 115. When the purchase of a program occurs, the service provider transmits to the transcoder 115, which belongs to the subscriber, an EMM 113 to thus authorize 123 decryption, as required. In addition, the EMM ownership management messages 113 are transmitted in a form that can be interleaved with the program 111 or can be transmitted through a separate channel to the transcoder 115, which stores the information of the EMM message 113 of operation of ownership in a security module 133 containing the authorization information 123. With reference to Figure 2, the invention described herein relates to an access device, which comprises: a means for receiving a program 215; means for indicating a desired impulse purchase 240; a means for communicating the desired impulse purchase 245; means 213 for transmitting to the transcoder a code that allows to see the desired impulse purchase. The system may also contain a means for generating billing record data 238 and transmits this data to a means for generating a billing record 260. More specifically, when the service provider transmits a program, it scrambles the content 211. The transcoder provides a means for receiving impulse purchase transmission, including receiving it in the scrambled form, decrypting it and providing a digital signal that can be seen and heard by the client. More particularly, the content 211 of the scrambled program contains audio and video data as well as various control messages, such as an ECM 209. The entitlement control messages 209 contain control words 216 which serve as the decryption codes for which the revolved portion of the program 211, to which it belongs can be deciphered and then assembled in a way that can be seen by the client, after its reception. The transcoder 215 decodes the protected digital data streams 229, which include the transmission programs as mentioned above. The transcoder 215 determines whether the scrambled program 211 should be ordered. When it is determined, based on the authorization codes, that the program is one that the customer has purchased, then the transcoder 215 proceeds to decrypt the program and leaves it available for viewing. The transcoder 215, includes a decipher 217, which uses a control word 219 as a key to decrypt scrambled programs 211. The control word 219 is produced by a control word generator 231, from the information contained in the control message 209 of ownership and the information of the authorization information 223 stored in the transcoder 215. The scrambled data and the ECM 209 associated with the control word 216 are received by a receiver 215 having a means (typically in a smart card that is inserted within the receiver) to generate a control word 216, which represents the N-bit decryption key for decoding the transmitted digital data. As indicated in the description of the prior art, the authorization information 223 may include a key for the service and an indication of the programs within the service to which the client is authorized to view. When the authorization information 223 indicates that the subscriber is entitled to view the program program 211 scrambled, the generator 231 of the control word uses the decryption key together with the information from the ECM 209 to generate the control word 219. The invention described herein differs from the prior art in that the authorization information is not pre-loaded in the transcoder 215, but it depends on the request for a desired impulse purchase and on the medium responding to the impulse purchase communication 245 desired. In the prior art, the authorization information is transmitted in advance together with the selected impulse program ("pre-loaded"). In the invention described herein, after receiving the desired impulse purchase 240, as communicated through a transmitting means 245 and a receiving means 250, the main end responds by transmitting the authorization information 227 to a security module 233, wherein the authorization information is stored in a memory 223. A means for communicating the authorization information 227 is through the EMM 213, which can be transmitted in the form that is interleaved with the program 211 or alternatively, it can be transmitting through a separate channel 227, for example, with the use of an out-of-band frequency or a communication network to the transcoder 215, which stores the information of the EMM message 213 of ownership handling in the memory 223 of the module 233 of security. The apparatus for communicating and receiving the programming set forth herein includes a means for generating a billing record 260. In addition, the invoice can be transmitted through a two-way communication channel to a billing center 270. With reference to Figure 3, the method for providing an impulse buyer with a secure means to purchase a program, which includes selecting a desired impulse purchase program 301, communicates the selection of the desired impulse purchase program to a supplier 310. of service, respond to the desired impulse purchase program by transmitting a uniquely associated code with the desired impulse purchase program and a given receiver 320; storing the code associated with the desired impulse purchase program within the security module 330; transmitting the program having a ownership code associated with the code stored in the security module 340; decode the ownership code 350; when the ownership code does not compare favorably with the code stored in the security module to allow viewing of the 360 program; indicate that the display is not authorized 380; and when the ownership code compares favorably, decode and assemble the program video to be viewed 370; and displaying video 390. It should be understood that the form of this invention is shown only as a preferred embodiment. Various changes can be made in the function and arrangement of parts, an equivalent means can be substituted by those illustrated and described, and certain features can be used independently of each other without departing from the spirit and scope of the invention as defined in following claims.

Claims (13)

1. An access device, characterized in that it comprises: a means for communicating a purchase selection on impulse to a service provider; means for receiving an authorization key transmitted by the service provider in response to the selection of the impulse purchase; a means to receive a program associated with impulse purchase selection; and a means to process the received program with the use of the authorization key.

2. An access device characterized in that it comprises: means for indicating the selection of the purchase by desired impulse; a means for communicating the desired impulse purchase selection to a service provider; means for receiving an authorization key transmitted in an access device and specific for selecting the desired impulse purchase; means for receiving the transmission of the desired program associated with impulse purchase selection; a means to process the received program with the use of the authorization key. The access device according to claim 2, characterized in that the means for communicating the desired impulse purchase selection transmits the selection through an out-of-band frequency. The access device according to claim 2, characterized in that the means for the means for receiving the authorization key receives the authorization key through an out-of-band frequency. The access device according to claim 2, characterized in that the means for communicating the desired impulse purchase uses a two-way communications interface. The access device according to claim 5, characterized in that it also comprises a means for generating a billing record in response to the reception of the authorization key, wherein the billing record is transmitted through an interface of Two-way communications. 7. An access device characterized in that it comprises: a tuning and communications unit for transmitting a impulse purchase message and receiving an authorization key transmitted in response to the transmission of the impulse purchase message and associated with the purchase program by impulse; a controller and decoder unit that responds to the authorization key that formats the digital program within a video deployment. 8. A method for providing a secure means for purchasing an impulse purchase program characterized in that it comprises the steps of: communicating a message to a service provider medium indicating an impulse purchase selection; receive the authorization information transmitted in response to the communicated message, and specific to the impulse purchase program; receive the impulse purchase program; process the impulse purchase program in response to authorization information. The method according to claim 8, characterized in that the step of communicating comprises communicating the message through an out-of-band frequency. The method according to claim 8, characterized in that the step of receiving comprises receiving the authorization through an out-of-band frequency. The method according to claim 8, characterized in that the step of communicating comprises communicating the message through a two-way communication interface. The method according to claim 8, characterized in that it further comprises the step of generating a billing record and transmitting the billing record through a two-way communications interface. 1

3. A method for providing a secure means to purchase an impulse purchase program, characterized in that it comprises the steps of: selecting a desired impulse purchase program; communicate the selection of the desired impulse purchase program to a service provider; responding to the selection of the desired impulse purchase program by transmitting an authorization code uniquely associated with the desired impulse purchase program; storing the authorization code associated with the desired impulse purchase program within a security module; transmitting the desired impulse purchase program that has the ownership code associated with the authorization code stored in the security module; decode the ownership code; compare the ownership code with the code stored in the security module to allow the display of the impulse purchase program.