Abstract: A system for securely authenticating software Application Program Interfaces (APIs) includes a handshake protocol provided between a Conditional Access System (CAS) and Middleware running on a Set-Top-Box. The handshake is a Challenge-Response protocol that includes several steps. The CAS or the Middleware can either act as a Claimant or Verifier in Challenge-Response process. First, a Claimant sends a request to a Verifier requesting access to a function F through the API. The Verifier reacts to the request by outputting a Challenge that is sent to the Claimant The Challenge is also retained by the Verifier for use in its internal calculation to verify the Claimant's response. The Claimant next processes the Challenge using components under a patent License Agreement, known as Hook IP, and issues a Response to the Verifier. The Verifier can then verify the Response to allow the Claimant access to the API.

Abstract: A method of generating a Personal Identification Number (PIN) between a first device and a second device in a network is provided. The method includes securely receiving information of input choices of the second device and random numbers assigned to the input choices at the first device. At the first device, the PIN is generated from the random numbers, and instructions are provided directing an entry of the input choices on the second device. At the second device, the input choices are entered. The second device is operable to generate the PIN from the input choices and the random numbers if the input choices are entered as instructed.

Abstract: A Digital Rights Management (DRM) system is provided that reduces time for a move transaction using DTCP-IP when a copy is moved back or checked back in to an originating Personal Video Recorder (PVR). During a DTCP MOVE transaction, instead of transferring the full asset in a check back in operation to the PVR, a unique and abbreviated representation of the original copy of the asset would be made for the transfer. This abbreviated representation takes the form of a hash constructed from a hashing function which uses characteristics of the asset as inputs. This hash will have to be a unique and near guaranteed indicator of the original content, to a high probability, so that the copy control system could live up to the spirit of the DTCP spec and the DLNA interoperability guidelines.

Abstract: A content moving device which enables providing content stored on a first user device, such as a DVR, in a first format and resolution to be provided to a second user device, such as a portable media player (PMP) in a second format and resolution. The content moving device identifies content on the first user device as candidate content which may be desired by the PMP and receives the candidate content from the DVR. The content moving device transcodes the candidate content at times independent of a request from the PMP for the content. The content moving device may provide a list of available transcoded content to the PMP for selection, and provide selected content to the PMP. The content moving device may also provide information relating to any protection schemes of the content provided to the PMP, such as DRM rights and decryption keys.

Abstract: Apparatus forming part of a home entertainment system includes an electronic device having an input accepting a signal corresponding to an externally-generated first user interface, a control module for internally-generating a signal corresponding to a second user interface, and an output for transmitting a combination of the above referenced signals for display. The control module controls an arrangement of display of the first user interface and the second user interface. The apparatus also includes a remote controller for communicating via a two-way communication link with the control module of the electronic device concerning a selection of one of the first user interface and the second user interface. The remote controller having an emitter for emitting control code signals, and the operation of the emitter is controlled by communications received by the remote controller from the control module of the electronic device. A method is also provided.

Abstract: The present invention discloses an apparatus and method for delivering a revocation list over a one-way broadcast network to receivers with limited memory capabilities. In one example, the revocation list is partitioned to form a first certificate revocation list (CRL) sequence if the number of entries in the revocation list exceeds a predetermined value. Individual identification numbers belonging to a first identification number series are subsequently assigned to partitions of the first CRL sequence. Afterwards, the first CRL sequence is interleaved into a first content transport stream.

Abstract: Two or more set-top boxes are installed in a household. A communications link, preferably a physical link, is provided between or among the set-top boxes. One of the boxes is designated as a “master” box while the other box or boxes are “slaves.” The slave box will use the communications link to communicate in a secured and encrypted manner with the master box. If that communication is severed, e.g., if an attempt is made to move the slave box to another household to provide unauthorized service in that household, the slave box will stop working when it can no longer communicate with the master box.

Abstract: In the present disclosure, a DRM (in this case IPRM) system may be used to deliver media content keys to a player device in a live streaming environment and take advantage of all DRM related functionalities that come with it, such as proximity control, copy protection enforcement and rights verification. A playlist may be used to deliver a key identifier for encrypted live streaming content.

Abstract: In an embodiment, a content array represents media content available from a media server. The content array, sent by a media server in response to a request, lists content program objects that represent media content to be available from the media server. The media server receives a message for altering a transcoding priority of the selected content program object that represents media content not previously transcoded by the media server, and sends a return code for indicating whether the transcoding priority was successfully altered in response to the message. In a further embodiment, a media server system includes a transcoding queue with references to a plurality of content program objects that include an object method for altering a transcoding priority, and includes a transcoder configured to transcode media content associated with the content program objects according to the transcoding priority of each content program object of the transcoding queue.

Abstract: A content moving device may provide content to plurality of different user devices using a plurality of different DRM systems. The content moving device provides for registration of the DRM systems associated with the user devices. The content moving device may verify a user device by a DRM ID associated with the user device. A domain size may be used to limit the number of content user devices that may be approved for access.

Abstract: A method for DTCP to HLS conversion is provided that starts with a standard DTCP Protected Content Packet (PCP) structure. The PCP payload data is chunked at defined chunk boundaries. Each chunk is then appended with a pad to be compatible with HLS. An HLS playlist is then provided using the PCP header with identification of the chunks and a keytag. The chunk is encrypted with a DTCP key calculated by the DTCP standard using: (a) copy control bits; (b) a nonce, and (c) an exchange key ID. Relevant PCP header fields are provided in the keytag for the HLS playlist, including the value of the copy control bits, the nonce and the exchange key ID, supporting the transaction that enables calculation of the DTCP content key to enable later decryption of the chunks.

Abstract: A method, apparatus, article of manufacture, and a memory structure for a CPT stream to a client device via an HTTP live streaming (HLS) protocol having a plurality of HLS media files is disclosed. In one embodiment, the method comprises generating an HLS playlist specifying a plurality HLS media files before generating any of the HLS media files, wherein each of the plurality of HLS media files has a unique name, transmitting the HLS playlist to the client device, after generating the HLS playlist, transcoding the CPT stream into at least a subset of the plurality of HLS media files, and providing at least one of the subset of plurality of HLS media files to the client device, wherein the at least one of the plurality of HLS media files is a client-requested media file selected from the HLS playlist.

Abstract: A process to enable trick play operations is provided for HLS streaming video that has been converted by a system from DTCP. The system server provides a modified SEEK operation when an HLS GET message is received from an HLS client player. For the process, a DLNA header is provided from the HLS client player by including it in the HLS GET message. The HLS client also provides a DLNA RANGE REQUEST that requests a range of chunks making up a video desired and a seek point from where a seek operation is needed. The HLS server recognizes the DLNA header of the HLS GET message and DLNA RANGE REQUEST and obtains a range of chunks making up an extent of the recorded video using metadata fields. The server then generates a new HLS playlist with identification of the chunks and keytag corresponding to the seek operation. The server will provide chunks from the seek point and a rolling playlist to identify chunks and keytag from the seek point.

Abstract: A method for registering a first device with a second device over a wireless network includes receiving a registration request from the first device and sending one or more user input choices to the first device. The user input choices each specify a user input action available though a user interface associated with the second device. A device description describing the second device is sent to the first device in a manner that allows it to be presented to the user by the first device. At least one of the user input actions are sequentially received through the user interface in response to instructions provided to the user by the first device. The first device is registered with the second device if the user input actions received by the second device correctly reflect the instructions provided to the user by the first device.

Abstract: A method of granting a client device remote access to a media server after receiving a port request from a remote client device at a residential gateway through an intermediate remote access control server by opening one or more wide area network ports temporarily mapped to local area network ports, such that the remote client device can communicate with the media server through the wide area network ports, transmitting a list of the one or more wide area network ports to the remote client device through the remote access control server, receiving a media content request from the remote client device and passing the media content request to the media server through the one or more wide area network ports, and passing media content from the media server to the remote client device through the one or more wide area network ports according to one or more restriction lists.

Abstract: A method of granting a client device remote access to a media server after receiving a remote access request at a remote access control server from a remote client device over a wide area network by receiving an opened port list at the remote access control server from the media server over the wide area network, the opened port list describing one or more wide area network ports opened at a residential gateway operating a local area network to which the media server is connected, and transmitting the opened port list and a network address of the residential gateway to the remote client device from the remote access control server, such that the remote client device can communicate with the media server on the local area network through the one or more wide area network ports opened at the residential gateway.

Abstract: A method for preparing streaming media content to be rendered by a media player employs a proxy for the media player. The proxy sends a request over a network to a content server. In response, a rolling manifest file is received by the proxy. The manifest file includes a sequence of media segment URLs indicating an ordering of the media segments that create a representation of a portion of the content stream. The URLs follow a predefined naming convention that allows URLs occurring prior to and subsequent to the URLs included in the manifest file to be predicted. The proxy predicts additional URLs that occur prior to and/or subsequent to the URLs included in the manifest file. The manifest file is modified by inserting the additional media segment URLs into the manifest file. The additional URLs are sequentially located before or after the URLs included in the manifest file.

Abstract: Systems and methods are provided for delivery and playback of bounded multimedia data files. A media gateway communicates with a client device, the communications being related to content lists, playlists, media assets, and security dialogs. A client device can perform playback while in communication with a media gateway. Several playlist can be employed.

Abstract: A method of scheduling a digital video recording via a remote device, comprising providing a digital video recorder comprising one or more tuners and a recording database stored on a storage device within the digital video recorder, the recording database being configured to store one or more recording schedules that describe programming events to be recorded by the digital video recorder, receiving a message over a data network connection from a remote device, the message describing instructions to add a new recording schedule about a particular programming event to the recording database, comprising a program identifier, a program name, a program icon URL, a channel identifier, a start time, an end time, a deletion priority, and a recording type, processing the message to add the new recording schedule to the recording database, and transmitting an error message to the remote device when the new recording schedule conflicts with another recording schedule already stored in the recording database.

Abstract: A method and system are provided for securely storing and retrieving live off-disk media programs. Events delineate media segments, each of which are encrypted with a different key so as to be streamable to a remote device via digital living network alliance (DLNA) or HTTP live streaming protocols. Media segments and identifiers for managing the storage and retrieval of such media segments are compatible with live streaming data structures, obviating the need to re-encrypt data streams.