Abstract: A method and system are disclosed to provide secure key selection using a secure device in a watercrypting environment. A license containing a product key of a watercrypted content and a client identifier is transmitted to a secure device for storage. An entitlement control message containing multiple content keys associated with the watercrypted content is further transmitted to the secure device, together with a request to provide a session content key from the multiple content keys, the session content key to be used to decrypt the watercrypted content. Finally, the session content key is received from the secure device in response to the request.

Abstract: A method and system to digitally sign a content license associated with content, and to distribute content via a network in a geographically controlled manner, commences when a content requester requests delivery of the encrypted content. A content delivery system performs a content to determine a geographic location associated with the content requester. The content requestor authorization process may also determine geographic access criteria associated with the content, and whether the geographic location complies with the geographic access criteria. The content delivery system will release the content for delivery to the content requestor if the content location complies with the geographic access criteria.

Abstract: A method and system to dynamically present a payment gateway to a content requestor commences when a content distributor receives a request for access to a content item provided by a content provider. The content distributor determines whether a first payment gateway of a first plurality of payment gateways is a preferred payment gateway. If the content distributor has recorded the first payment gateway as a first preferred payment gateway then the content distributor presents the first payment gateway to a content requester as an actual preferred payment gateway. If the content distributor has not recorded the first payment gateway as the first preferred payment gateway, then it presents a second preferred payment gateway, recorded by the content provider of the content item, as the actual preferred payment gateway to the content requester.

Abstract: In a method for operating a conditional access system for broadcast applications, the conditional access system comprising a number of subscribers and each subscriber having a terminal including a conditional access module and a secure device for storing entitlements, a source signal is encrypted using a first key (CW). The encrypted source signal is broadcasted for receipt by the terminals, wherein entitlement control messages (ECM's) are sent to the secure devices, the ECM's comprising the first keys (CW) encrypted using a service key (PT). Entitlement management messages (EMM's) are sent to the secure devices providing the service key (PT) required to decrypt encrypted first keys (CW). A cracked secure device which is used in an unauthorized manner is traced by sending different keys required to obtain the first keys to different terminals or groups of terminals and monitoring the key information provided by a pirate.

Abstract: A method comprising receiving a product key at a service provider, where the product key is (1) received from a first content provider, and (2) encrypting a first content controlled by the first content provider. The method encrypts the product key within a first secure device at the service provider using a storage key and stores the encrypted product key at the service provider.

Abstract: A method includes generating a set of session keys and encrypting content utilizing the set of session keys to generate encrypted content. The set of session keys is transmitted. The encrypted content is transmitted to a content destination, so as to enable the content destination, utilizing the set of session keys, to decrypt the encrypted content.

Abstract: A method includes associating a first authentication process with content, the first authentication process to protect the content from access by an unauthorized user. A second authentication process is also associated with the content, the second authentication process to protect the content from access by an unauthorized device. The first authentication process and the second authentication process are separate and distinct authentication processes. This enables an authorized user to access the content on an authorized device and prevents the authorized user from accessing the content on the unauthorized device.

Abstract: A media delivery network is provided which includes a digital rights server and a media server to store content to deliver to a content consumer upon demand. The digital rights server stores content consumer rights defining access rights of a content consumer with respect to content, and content owner rights defining access policies to the content as established by a content owner. In one embodiment, the delivery of the content to the content consumer is timed and the access rights of the content consumer are updated in response to a delivered time during which the content was delivered to the content consumer. The invention extends to a method of controlling the delivery of content from a media server to a content destination or consumer and to a machine-readable medium for storing a set of instructions to execute any one or more methods of the invention. In one embodiment, further delivery may be denied after a certain position within the media has been reached.

Abstract: A method and system to provide digital content to a content destination (e.g., a media terminal) is described. The method comprises providing a plurality content provider identifiers to a content destination for display on an associated display device, wherein each content provider identifier is associated with a content provider. User selection of one of the plurality of content provider identifiers is then monitored and at least one available content identifier is communicated to the content destination in response to the user selection of a content provider identifier. The available content identifier may be associated with the content provider identifier. The content provider identifiers may for example identify content providers such as Disney, ESPN, NOOF or the like. Each content provider identifier may be associated with a plurality of available content identifiers arranged in a hierarchical fashion.

Abstract: In a method for operating a conditional access system for broadcast applications, the conditional access system comprising a number of subscribers and each subscriber having a terminal including a conditional access module and a secure device for storing entitlements, a source signal is encrypted using a first key (CW). The encrypted source signal is broadcasted for receipt by the terminals, wherein entitlement control messages (ECM's) are sent to the secure devices, the ECM's comprising the first keys (CW) encrypted using a service key (PT). Entitlement management messages (EMM's) are sent to the secure devices providing the service key (PT) required to decrypt encrypted first keys (CW). A cracked secure device which is used in an unauthorised manner is traced by sending different keys required to obtain the first keys to different terminals or groups of terminals and monitoring the key information provided by a pirate.