Abstract: A broadcast receiving system is disclosed that verifies a current digital certificate extracted from a digital broadcast signal using a previous digital certificate previously stored as trusted. The current and previous digital certificates are associated with digital signatures with which data received with the broadcast signal has been signed. Also disclosed is a system for signing application data to be broadcast together with a digital certificate in a digital broadcast signal. A current digital certificate attesting the validity of a digital signature attached to broadcast data is in turn signed with a digital signature using one or more previous private keys associated with respective previous certificates identifying the issuer of the current digital certificate. These disclosures are in particular applicable to HbbTV.

Abstract: The present invention concerns a method for building a watermarked content for sending to at least one user unit having a user unit identifier, the watermarked content comprising a first series of packets, at least some from the first series of packets being available in at least two different qualities, wherein said method comprises the steps of: generating a watermark based on at least the user unit identifier, the watermark being formed by a first series of values from a predetermined set of values; mapping each of the at least two different qualities to one from the predetermined set of values; building the watermarked content by sequentially selecting from the first series of packets, a packet having a quality corresponding to each value from the first series of values forming the watermark. It further concerns a method for transmitting such a watermarked content.

Abstract: A personal mobile device receives a session-request message requesting establishment an encrypted-audio session with a call-initiating device. In response, one or more call-response inquiries are presented via a user interface of the mobile device. The one or more call-response inquiries include an accessory-status inquiry with respect to an accessory to the mobile device. The mobile device receives, via the user interface, an accessory-unready indication with respect to the accessory, which is associated with the presented accessory-status inquiry. In response to receiving the accessory-unready indication, the mobile device establishes a communication link with the call-initiating device and refrains from exchanging audio data with the call-initiating device via the established communication link.

Abstract: An apparatus includes an audio-sensor inhibitor configured to inhibit detection of sound by an audio sensor of a communication device, and a secure communication interface coupled to the audio-sensor inhibitor, the secure communication interface being configured to transmit encrypted audio data from the secure communication interface to the communication device, wherein the communication interface generates audio data using a secure-interface audio sensor, and generates the encrypted audio data by encrypting the audio data using a cryptographic module.

Abstract: An embodiment takes the form of a method carried out by a personal mobile device. The personal mobile device receives a session-request message requesting establishment an encrypted-audio session with a call-initiating device, responsively presents one or more call-response inquiries via a user interface, and subsequently receives an accessory-unready indication via the user interface. The one or more call-response inquiries include an accessory-status inquiry, and the accessory-unready indication is associated with the presented accessory-status inquiry. In response to receiving the accessory-unready indication, the personal mobile device sends, to the call-initiating device, a request-acknowledgment message that is associated with the session-request message. Subsequent to sending the request-acknowledgment message but before establishing the encrypted-audio session, the personal mobile device makes an accessory-ready determination.

Abstract: An embodiment takes the form of an accessory for attachment to a communication device, the accessory comprising a microphone disposed on the accessory to detect sound, a cryptographic module disposed on the accessory in communication with the microphone to generate encrypted audio data based on the detected sound, a communication interface disposed on the accessory in communication with the cryptographic module configured to convey the encrypted audio data to the communication device, and an audio-sensor inhibitor arranged to be positioned adjacent to a communication-device audio sensor.

Abstract: The present invention may be deployed in a system for broadcast of conditional access content where it is desirable to detect and take action against receiver equipment which has been used in a control word sharing activity. By requiring that receiver equipment used in the system send a message to a broadcaster of conditional access content at a precise time, the invention provides a method for the server to detect receiver equipment involved in control word sharing activity and to inhibit that receiver's ability to further access the content.

Abstract: A method for pairing a multimedia receiver connected to an IP network with at least one mobile equipment connected to a mobile network using a communication protocol different from the IP network. A unique identifier of the mobile equipment is introduced into an application on the multimedia receiver. The latter transmits, to the mobile equipment, a message comprising a pairing request and a command for acquiring a unique public address of the multimedia receiver, said mobile equipment being identified by an address associated to the unique identifier. The mobile equipment receives the message and transmits a response message to the multimedia receiver identified by the unique public address, said response message comprising unique identifier. The multimedia receiver verifies the unique identifier in the response message by comparing it with the unique identifier introduced into the application. If the verification is successful, the mobile equipment pairs with the multimedia receiver.

Abstract: The present invention may be deployed in a system for broadcast of conditional access content where it is desirable to detect and take action against receiver equipment which has been used in a control word sharing activity. By requiring that receiver equipment used in the system send a message to a broadcaster of conditional access content at a precise time, the invention provides a method for the server to detect receiver equipment involved in control word sharing activity and to inhibit that receiver's ability to further access the content.

Abstract: A physical device, the possession of which may provide access to digital media content in a fashion similar to the possession of a DVD providing access to the media content stored thereupon on a suitable DVD player. The possession of the physical device grants access to digital content stored on a remote server using a suitable device such as e.g., a set-top box or media player having Internet connectivity. The physical device provides for convenient and possibly anonymous access to content stored on a remote server and has certain advantages over known techniques for storing rights to access the content.

Abstract: A physical device, the possession of which may provide access to digital media content in a fashion similar to the possession of a DVD providing access to the media content stored thereupon on a suitable DVD player. The possession of the physical device grants access to digital content stored on a remote server using a suitable device such as e.g., a set-top box or media player having Internet connectivity. The physical device provides for convenient and possibly anonymous access to content stored on a remote server and has certain advantages over known techniques for storing rights to access the content.

Abstract: An embodiment takes the form of a method carried out by a personal mobile device. The personal mobile device receives a session-request message requesting establishment an encrypted-audio session with a call-initiating device, responsively presents one or more call-response inquiries via a user interface, and subsequently receives an accessory-unready indication via the user interface. The one or more call-response inquiries include an accessory-status inquiry, and the accessory-unready indication is associated with the presented accessory-status inquiry. In response to receiving the accessory-unready indication, the personal mobile device sends, to the call-initiating device, a request-acknowledgment message that is associated with the session-request message. Subsequent to sending the request-acknowledgment message but before establishing the encrypted-audio session, the personal mobile device makes an accessory-ready determination.

Abstract: An embodiment takes the form of an accessory for attachment to a communication device, the accessory comprising a microphone disposed on the accessory to detect sound, a cryptographic module disposed on the accessory in communication with the microphone to generate encrypted audio data based on the detected sound, a communication interface disposed on the accessory in communication with the cryptographic module configured to convey the encrypted audio data to the communication device, and an audio-sensor inhibitor arranged to be positioned adjacent to a communication-device audio sensor.

Abstract: A method for authenticating a user to a provider, among a plurality of providers. The method uses an authentication device comprising, for each of provider, a record comprising a pairing key and first data, both as shared data. Provider authentication data comprises a first cryptogram obtained by encrypting said first data with said pairing key. Authenticating provider authentication data is performed at the authentication device by the steps of decrypting said first cryptogram by means of the pairing key stored in one of said records, then comparing the result of this decryption with first data resulting from pairing data stored in said record, if the comparison does not indicate a match, then processing again the previous decryption and comparison steps by using the pairing key of another record until each of said records stored in the authentication device has been processed.

Abstract: A system for a local network, the system being configured to extend a near field communication (NFC) between an NFC device and an NFC mobile device beyond the range defined by the NFC standards.

Abstract: A method for authenticating a user to a provider, among a plurality of providers. The method uses an authentication device comprising, for each of provider, a record comprising a pairing key and first data, both as shared data. Provider authentication data comprises a first cryptogram obtained by encrypting said first data with said pairing key. Authenticating provider authentication data is performed at the authentication device by the steps of decrypting said first cryptogram by means of the pairing key stored in one of said records, then comparing the result of this decryption with first data resulting from pairing data stored in said record, if the comparison does not indicate a match, then processing again the previous decryption and comparison steps by using the pairing key of another record until each of said records stored in the authentication device has been processed.

Abstract: The present invention concerns a method for building a watermarked content for sending to at least one user unit having a user unit identifier, the watermarked content comprising a first series of packets, at least some from the first series of packets being available in at least two different qualities, wherein said method comprises the steps of: generating a watermark based on at least the user unit identifier, the watermark being formed by a first series of values from a predetermined set of values; mapping each of the at least two different qualities to one from the predetermined set of values; building the watermarked content by sequentially selecting from the first series of packets, a packet having a quality corresponding to each value from the first series of values forming the watermark, It further concerns a method for transmitting such a watermarked content.

Abstract: A method and cryptographic system for descrambling content packets, included within a digital transport stream, having conditional access messages and header data. The method and system require a deciphering algorithm, processed by a descrambler of a multimedia unit, using an initialization vector as a first input and a control word as a second input. The multimedia unit is connectable to a security module for processing the conditional access messages and extracting control words therefrom. The initialization vector, or intermediate data to determine the initialization vector, is the result of a cryptographic function based on at least one variable extracted from the digital transport stream and processed by the security module.

Abstract: The present invention concerns a method for building a watermarked content for sending to at least one user unit having a user unit identifier, the watermarked content comprising a first series of packets, at least some from the first series of packets being available in at least two different qualities, wherein said method comprises the steps of: generating a watermark based on at least the user unit identifier, the watermark being formed by a first series of values from a predetermined set of values; mapping each of the at least two different qualities to one from the predetermined set of values; building the watermarked content by sequentially selecting from the first series of packets, a packet having a quality corresponding to each value from the first series of values forming the watermark.

Abstract: A system for a local network, the system being configured to extend a near field communication (NFC) between an NFC device and an NFC mobile device beyond the range defined by the NFC standards.