Abstract: A logical building block and method of using the building block to design a logic cell library for CMOS (Complementary Metal Oxide Silicon) ASICs (Application Specific Integrated Circuits) is disclosed. Different logic gates, built with the same building block as described in this invention, will have the same schematics of transistor connection and also the same physical layout so that they appear to be physically identical under optical or electron microscopy. An ASIC designed from a library of such logic cells is strongly resistant to a reverse engineering attempt.

Abstract: A method and apparatus for providing conditional access to media programs is described. An exemplary method comprising the steps of transmitting media information encrypted according to a control word (CW) to a receiver station, transmitting entitlement management information (EMI) to the receiver station, the EMI comprising a service bitmap, and transmitting entitlement control information (ECI) to the receiver station, the entitlement control information including the control word (CW) encrypted according to a key (K) and an index to an element of the service bitmap, wherein the control word (CW) is decrypted by the receiver stations according to a value of the indexed element of the service bitmap.

Abstract: A method and apparatus for providing conditional access to media programs is described. An exemplary method comprising the steps of transmitting media information encrypted according to a control word (CW) to a receiver station, transmitting entitlement management information (EMI) to the receiver station, the EMI comprising a service bitmap, and transmitting entitlement control information (ECI) to the receiver station, the entitlement control information including the control word (CW) encrypted according to a key (K) and an index to an element of the service bitmap, wherein the control word (CW) is decrypted by the receiver stations according to a value of the indexed element of the service bitmap.

Abstract: A method, apparatus, article of manufacture, and a memory structure for delivering purchase information comprising storing purchase information for a purchase of a user in a set top box. The set top box (STB) is configured to receive and display the broadcast signals through a tuner onto a display device. The STB establishes a connection to the Internet through a user initiated action (e.g., when the user accesses the Internet using the STB). A new transmission control/Internet protocol (TCP/IP) connection is obtained using the established user-initiated Internet connection without the user requesting the connection. A secure electronic connection is established with a server through the new TCP/IP connection. The purchase information is then transmitted from the STB through the secure electronic connection to the server.

Abstract: A logical building block and method of using the building block to design a logic cell library for CMOS (Complementary Metal Oxide Silicon) ASICs (Application Specific Integrated Circuits) is disclosed. Different logic gates, built with the same building block as described in this invention, will have the same schematics of transistor connection and also the same physical layout so that they appear to be physically identical under optical or electron microscopy. An ASIC designed from a library of such logic cells is strongly resistant to a reverse engineering attempt.

Abstract: A method, apparatus, article of manufacture, and a memory structure for camouflaging an application specific integrated circuit (ASIC), wherein the ASIC comprises a plurality of interconnected functional logic cells. In one embodiment, the method comprises the steps of identifying at least one gap between the plurality of interconnected functional logic cells having no functional logic therein, placing one filler cell or combination of filler cells into the identified gap and defining a routing of the placed filler cells.

Abstract: A method and apparatus for presenting a media data stream complying with a broadcast encryption standard is disclosed. A dongle is removably coupleable to a rendering device, with the dongle performing transcoding so as to allow presentation of the media in a secure manner without modification of the rendering device software or hardware.

Abstract: A method, apparatus, article of manufacture, and a memory structure for delivering purchase information comprising storing purchase information for a purchase of a user in a set top box. The set top box (STB) is configured to receive and display the broadcast signals through a tuner onto a display device. The STB establishes a connection to the Internet through a user initiated action (e.g., when the user accesses the Internet using the STB). A new transmission control/Internet protocol (TCP/IP) connection is obtained using the established user-initiated Internet connection without the user requesting the connection. A secure electronic connection is established with a server through the new TCP/IP connection. The purchase information is then transmitted from the STB through the secure electronic connection to the server.

Abstract: Program materials received from a direct broadcast satellite system are distributed between a host receiver and a client receiver for remote decryption. Using either a same pairing key or different host and client pairing keys, an encrypted media encryption key is received at both the host and client receivers, and the encrypted media encryption key is decrypted at both the host and client receivers using the pairing key. Encrypted program materials are received from the broadcast system at the host receiver, and the encrypted program materials are decrypted at the host receiver using the media encryption key. The encrypted program materials are also transferred from the host receiver to the client receiver, where the encrypted program materials are decrypted at the client receiver using the media encryption key.

Abstract: A system and method of controlling access to a media program via a receiver communicably coupleable to a conditional access module is described. The apparatus comprises a first processor, a second processor, and an interface module, communicatively coupled to the first processor and the second processor, the interface module for processing all communications with the conditional access module and externally manifesting a single virtual processor to the receiver.

Abstract: One or more embodiments of the invention provide a method, apparatus, and article of manufacture for preventing unauthorized access to digital services comprising. Access control to digital services is distributed among a plurality of physically separate and independently controlled nonvolatile memory components on a system bus. The plurality of nonvolatile memory components are then communicatively coupled to a microprocessor. The microprocessor is configured to use state information in the nonvolatile memory components to provide desired functionality and enforce one or more security policies for accessing the digital services.

Abstract: One or more embodiments of the invention provide a method, apparatus, and article of manufacture for limiting unauthorized access to digital services. A hidden non-modifiable identification number is embedded into a nonvolatile memory component. The nonvolatile memory component is used to contain state information to provide desired functionality and enforce one or more security policies for accessing the digital services. Also, the hidden number uniquely identifies a device containing the nonvolatile memory component and access to the digital services is based on access rights associated with the hidden number. Once embedded, access to the nonvolatile memory component is isolated such that access to the identification number is limited to a fixed state custom logic block, the nonvolatile memory component is protected from modification such that it is read only, and the nonvolatile memory component is not directly accessible via a system bus.

Abstract: A system and method for storing and retrieving program material for subsequent replay is disclosed. The method includes accepting a receiver ID associated with a receiver key stored in a memory of the receiver, determining a pairing key for encrypting communications between the conditional access module and the receiver, encrypting the pairing key with the receiver key, and transmitting a message comprising the encrypted pairing key to the receiver. The apparatus comprises a receiver for receiving a data stream transmitting a media program encrypted according to a media encryption key and an encrypted media encryption key and a conditional access module, communicatively coupleable with the receiver.

Abstract: One or more embodiments of the invention provide a method, apparatus, and article of manufacture for limiting unauthorized access to digital services. A protected nonvolatile memory component is configured. The protected nonvolatile memory component is used to contain state information to provide desired functionality and enforce one or more security policies for accessing the digital services. Additionally, the protected nonvolatile memory component and a microprocessor's nonvolatile memory component share a programming charge pump and programming control. Access to the nonvolatile memory component is then controlled through a fixed state custom logic block.

Abstract: A system and method for storing and retrieving program material for subsequent replay is disclosed. The method includes accepting a receiver ID associated with a receiver key stored in a memory of the receiver, determining a pairing key for encrypting communications between the conditional access module and the receiver, encrypting the pairing key with the receiver key, and transmitting a message comprising the encrypted pairing key to the receiver. The apparatus comprises a receiver for receiving a data stream transmitting a media program encrypted according to a media encryption key and an encrypted media encryption key and a conditional access module, communicatively coupleable with the receiver.

Abstract: A method and apparatus for securely and remotely enabling the playing of a media program encrypted by a content encryption key over the Internet is disclosed. A license encryption key and a content decryption key are separately and securely transmitted to the receiver. The license encryption key is stored in the CAM and later used to decrypt the content encryption key so that the media program may be recovered.

Abstract: A method apparatus for providing conditional access to media programs is disclosed. The apparatus comprises a first conditional access module that is integral with a receiver; a second conditional access module that is removably communicatively coupleable with the receiver; and a conditional access kernel that controls the conditional access operations of the first conditional access module and the second conditional access module according to a control structure received by the receiver from a remote source.

Abstract: A method and apparatus for providing conditional access to media programs is disclosed. An embodiment of the method comprises the steps of generating a validation message in at least one of the receiver stations, the validation message comprising an answer to a validation query; transmitting the validation message directly from the receiver to the satellite on an always-on backchannel communications link; and receiving the media programs from the satellite only if the validation message matches an expected validation message.

Abstract: A method and apparatus for providing conditional access to media programs is described. An exemplary method comprising the steps of transmitting media information encrypted according to a control word (CW) to a receiver station, transmitting entitlement management information (EMI) to the receiver station, the EMI comprising a service bitmap, and transmitting entitlement control information (ECI) to the receiver station, the entitlement control information including the control word (CW) encrypted according to a key (K) and an index to an element of the service bitmap, wherein the control word (CW) is decrypted by the receiver stations according to a value of the indexed element of the service bitmap.

Abstract: One or more embodiments of the invention provide a method, apparatus, and article of manufacture for providing access to digital services. Configuration information that has been transmitted asynchronously is received in a security component (that is configured to control access to the digital services). A hardware state machine (that comprises custom logic that is used to control access to the digital services) in the security component is then dynamically reconfigured based on the configuration information.