Abstract: A descrambling apparatus includes a descrambling module and a one-time programmable module. The descrambling module descrambles an input data stream. When the one-time programmable module is in a first status, the descrambling module descrambles the input data stream by a first mode. When the one-time programmable module is in a second status, the descrambling module descrambles the input data stream by a second mode.

Abstract: The terminal comprises a tuner, a security chip and a digital television terminal main chip. The tuner is used to receive cable television broadcast data through a cable for cable televisions, and transmit the received cable television broadcast data to the security chip. A key message required by CA is stored in the security chip. The security chip is used to extract stream media of a program needing to be played from the received cable television broadcast data, descramble the stream media according to the stored key message required by the CA, encrypt the descrambled stream media, and transmit the encrypted stream media to the digital television terminal main chip. The digital television terminal main chip is used to decrypt the received encrypted stream media, decode the decrypted stream media to obtain audio and video data, and output the audio and video data.

Abstract: On-demand protection and authorization of playback of media assets includes receiving digital media at a server computer, storing intermediary data in a data store, and receiving a request from a client for the digital media. The method also includes generating a protected copy of the digital media from the digital media and the intermediary data. The method also includes storing a description of the protected copy in a database and sending the protected copy to the client. The method also includes receiving a request from the client to access the digital media and reading the description from the database based on information in the request. The method also includes sending a response to the client, the response indicating whether the client is authorized to access the digital media, and the response including cryptographic data to decrypt the protected digital media if the client is authorized to access the digital media.

Abstract: A method for improving the performance of data storage and transmission systems involves applying a transformation to one or a plurality of aligned data segment(s) prior to or subsequent to the execution of data management operations. The transformation effectively reduces the number of bits in the data segment that must be employed by the data management operation processing. Data management operations performed on a data segment may include but are not limited to cryptographic security operations and data comparison operations. Since the computation requirements of data management operations can decrease as the bit lengths of input data decrease, the transformation can reduce the latencies of data management operations in hardware or software. Furthermore, performing the transformation on a data segment does not reduce the number of bits needed to encode the data segment, thus maintaining the alignment of a plurality of data segments.

Abstract: There is disclosed an integrated system for converting content provided by an operator of multiple cable television systems (e.g. a MSO) to content suitable for distribution within a multi-dwelling unit (MDU). A chassis is provided comprising slots for receiving cableCARDs, an input for receiving a cable feed, and an output for transmitting the RF signal. Circuitry within the chassis is configured to extract selected encrypted programs from the cable feed, forward these encrypted programs to the cableCARDs for decryption, and encrypt the decrypted programs using an encryptor such as a Pro:Idiom™ encryptor. A control unit is provided for controlling the operation of at least some of the circuitry within the chassis. The control unit is responsive to instructions sent over a network cable to allow for remote control of the circuitry.

Abstract: The invention provides a solution for secure and non-manipulatable processing of a data stream in a receiver, possibly in conjunction with a smartcard. A packet identity and a content type identifier associated with the packet identifier are received in encrypted form and securely processed within the receiver to allow an encrypted payload of the data stream to be processed without the possibility to manipulate the content type identifier in an attempt to intercept the payload after decryption.

Abstract: A method for operating a signal receiver which authorizes controlled access, comprising providing an authentication token device having a predetermined usage limit stored therein, providing a reading device for reading the authentication token device, and for implementing the predetermined usage limit while deauthorizing the authentication token device for use with other reading devices, comprising a signal generator for communicating with a signal receiver through a wireless transmission, receiving the wireless transmission at the signal receiver, to permit access based on the received transmission, and upon exceeding the predetermined usage limit, deauthorizing further access.

Abstract: Parental controls for entertainment digital media are provided that allow a parent to restrict multiple user's access to entertainment content. One or more updatable rating definition files with dynamic data are used to define rating levels and content descriptors for a regional rating system. Entertainment content definition files define the rating level and content descriptors for entertainment content. User permission settings define a particular user's access rating level and content descriptors. The rating definition file can be used to compare the entertainment content definition file and user permission settings in determining if a user is allowed access to particular entertainment content.

Abstract: A system includes a transport central processing unit of an information appliance device. The transport central processing unit receives a message from a head-end. The transport central processing unit provides access of the message to the security processing unit. A host central processing unit connected with the transport central processing unit is prohibited access to the message.

Abstract: The invention relates to video distribution systems and, more particularly, to a system that blanket transmits video/audio content such as digital data (for example, via satellite downlink transmission) to each customer's computer-based recording, storage and playback system. Customers preselect from a list of available digital data or other content in advance using an interactive screen selector, and pay for only the video/audio content that is actually viewed.

Abstract: Distributed navigation of broadcast signals is provided through an on-line application connected through a second network connection. A customer receives the broadcast signals through a first network connection, and navigates the broadcast TV content through an on-line application by a browser connected through a second network connection. The present on-line application provides flexible and re-configurable content services, which will need to be customized once for each service provider, but will render consistently on a variety of PC and non-PC client devices. Further, the present on-line application can provide targeted advertising by maintaining an advertising profile for each viewer, determined in part by recording data about the navigating of the content of the broadcast signals, and by recording a plurality of selections of the viewer transmitted to the on-line application. The on-line capability further provides ease for roaming access.

Abstract: Bit-stripping methods are described for protecting digital media content against illicit recording and sharing. In one such method, a client device receives the media content and performs bit stripping on the received media content, thereby creating two datasets: stripped data and recombination data. The client device then recombines the datasets to reconstitute the media content, and it plays back the media content. Preferably, the media content on the client device is not available to recording software, and either the stripped data or the recombination data is also unavailable to such software. The client device may store one of these datasets; when future playback is desired, the client device requests the other of the datasets from a server. The bit-stripping may be performed in a client-specific way to discourage sharing of datasets.

Abstract: Methods and apparatus for connecting, e.g., bridging, a cable network to other networks and/or devices is described. A bridge device facilitates the distribution of cable provider content to end users operating IP based devices. The bridge device performs one of more of the following: interface protocol conversions, user device controlled tuner selection, transcoding of data, transrating of a data stream, decryption in accordance with a conditional access protocol and re-encryption in accordance with an authorized service domain protocol.

Abstract: A number of encryption system types utilized by subscriber terminal devices currently requesting tuning to a particular switched digital video (SDV) content selection is determined in response to each change in a number of the subscriber terminals requesting tuning to the particular SDV content selection. SDV content associated with the particular SDV content selection is encrypted as either encrypted SDV content or multiply partially encrypted SDV content based upon the determined number of encryption system types beginning from a current play location indicated for the SDV content selection within an electronic program guide (EPG). Either the encrypted SDV content or the multiply partially encrypted SDV content is distributed as part of an outgoing SDV content stream to the subscriber terminals currently requesting tuning to the particular SDV content selection.

Abstract: Aspects of the invention are directed to a method and system for end-to-end proof of display. A method for according to an embodiment includes: generating a unique identifier (UID) for a triplet including an item of digital content, an identity of a playlist that includes the item of digital content, and an identity of a player on which the item of digital content is to be rendered; generating a visual identifier based on the UID and a timecode; rendering the item of digital content on a display screen; overlaying the visual identifier on the rendered item of digital content on the display screen; capturing the visual identifier on the display screen; and extracting the UID and timecode from the captured visual identifier. A match test is performed using the extracted UID to populate a match list, which is reported to a content manager to provide end-to-end proof of display.

Abstract: A method of providing access to content based upon one or more adequately-credentialed keys being proximate to a certain location. The method includes a first step of acquiring credential information from at least one key tagged with credential information using a credential acquisition device (CAD) at the certain location. The method also includes a second step of confirming that the credential information meets requirements for receiving the content. Further, the method includes a step of providing access to the content after performing the first and second steps.

Abstract: Methods, apparatus and articles of manufacture for program telecast monitoring using watermarks are disclosed. Example methods disclosed herein to watermark media can include encoding the media with a sequence of watermarks, a watermark in the sequence of watermarks including payload data identifying the media. Such example methods can also include, modifying the sequence of watermarks to further include a data pattern associated with a particular transmission of the media. In some examples, respective watermarks in the sequence of watermarks are to be modified to include respective portions of the data pattern, wherein the respective portions, when combined, form the data pattern.

Abstract: A method is disclosed for encrypting a multimedia file including parsing the multimedia file to identify a media data portion; encrypting the media data portion; and, combining the encrypted media data portion with a non-encrypted non-media data portion. A method is also disclosed for playing a multimedia file including parsing the multimedia file to identify an unencrypted metadata portion; using the unencrypted metadata portion to locate a position of interest in the media file, the position of interest having an associated encrypted media data portion; and, decrypting the associated encrypted media data portion. An apparatus for performing the methods is also disclosed herein.

Abstract: An apparatus for encrypting and recording a broadcasting program includes a packet input unit configured to receive packets of a broadcasting program to be recorded and sequentially output the packets, an encryption selector configured to receive the packets sequentially output from the packet input unit, selectively output the received packets to a first path and to a second path, wherein packets to be encrypted are output to the first path and packets not to be encrypted are output to the second path, an encryption processor configured to encrypt the packets output to the first path based on a predetermined encryption method, and a storing unit configured to store the encrypted packets from the encryption processor or store the packets output to the second path.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: An approach is provided for monitoring location of a user of a mobile device. A notification triggering event based on location of a mobile device is detected. Notification information is generated in response to the detection of the notification triggering event. The notification information to a video processor (e.g., set-top box) that is configured to transmit the notification information to a display.

Abstract: A method consistent with certain implementations involves receiving a stream of legacy encrypted main content that contains selectively DRM encrypted duplicate content; decrypting the legacy encrypted stream of content; eliminating the duplicate content that is not DRM encrypted; generating a selectively DRM encrypted stream of content; and providing the selectively DRM stream of content as an output signal for consumption by a device residing on a home entertainment network. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: An image display apparatus and a method for operating the image display apparatus are provided. The method receives a broadcast signal, generates a thumbnail image based on broadcast information included in the received broadcast signal when the received broadcast signal is a broadcast signal of at least one of an audio channel, a data channel, or a scrambled channel, and displays a thumbnail list including the generated thumbnail image. This allows the user to easily identify the contents of broadcasts of a plurality of channels.

Abstract: A processor is configured to receive a digital video stream, calculate a hash of an I-Frame within the digital video stream, and submit the hash to a server. The processor is further configured to receive location information in response to submitting the hash to the server.

Abstract: A method of providing access to a block of stored content includes transmitting a general EPG at a content receiver for display on a presentation device, the EPG including a plurality of channels having a plurality of programs available at a plurality of times, receiving input from a user to display a block guide, and transmitting the block guide wherein, the block guide is associated with the block of stored content for accessing the block of stored content, the block guide including a plurality of channels having a plurality of programs available for a selected airing time.

Abstract: A system architecture provides a hardware-based root of trust solution for supporting distribution and playback of premium digital content. In an embodiment, hardware root of trust for digital content and services is a solution where the basis of trust for security purposes is rooted in hardware and firmware mechanisms in a client computing system, rather than in software. From this root of trust, the client computing system constructs an entire media processing pipeline that is protected for content authorization and playback. In embodiments of the present invention, the security of the client computing system for content processing is not dependent on the operating system (OS), basic input/output system (BIOS), media player application, or other host software.

Abstract: Apparatus and methods for provisioning of customer premise equipment (CPE) equipped with a secure microprocessor to receive e.g., digital video content by entering unique identification of the CPE at one or more servers located at the headend or other location of a content-based network. In one embodiment, the CPE comprises a download-enabled (e.g., DCAS) host with embedded cable modem and embedded set-top box functionality, and the provisioning includes enabling DOCSIS functionality of the CPE, assigning an IP address to the CPE and providing the CPE with a client image for the conditional access system chosen by the network operator. In one variant, the network operator can deactivate a provisioned device while connected to the network, as well when disconnected from the network. The network operator can also add, delete or replace conditional access client image in a provisioned device.

Abstract: A system, apparatus, and method are directed towards managing entitlement/right revocation and delivery to be performed within a non-addressable media network. Such networks may include for example a client device behind a network address translation (NAT) device, employs non-addressable satellite components, or so forth. A server notifies clients that entitlements, revocations, or the like are available by sending a request for communications with the client. The client initiates a connection to receive the entitlements, or the like, and then disconnects from the server. If the client fails to initiate a connection, the server may continue to send a request for a connection, or even change encryption keys to the content to prevent access by the client. In one embodiment, failure to receive an acknowledgement response from the server of a connection with the client, or from the client, may result in invocation of a revocation failure action.

Abstract: The present technology concerns cell phones and other portable devices. One claim recites a method employing a portable device including a processor, microphone and an interface to receive user inputs, the portable device also including a display screen. The method comprises: receiving a first user request, through the interface, for processing audio content captured with the microphone; processing the audio to yield fingerprint data; communicating the fingerprint data and portable device location information to a remote computer system; in response to said communicating, receiving information including a title associated with the audio content; presenting the title on the display screen; in response to a second user request, through the interface, displaying information associated with audio content captured by other portable devices in an area associated with the portable device location information. Of course, other claims and combinations are provided too.

Abstract: A fast channel change (FFC) system including a tuner arrangement to receive at least one transport stream including an aggregated video service (AVS) and TV channels, each video frame of the AVS including some video data of each channel, a demultiplexer arrangement to demultiplex a first channel and the AVS, a FCC buffer to buffer the video frames of the AVS, a decoder arrangement to decode the first channel, a controller to instruct the decoder arrangement to switch from decoding the first channel to decoding the AVS from the FCC buffer, and a graphic engine to extract the video data of a second channel from the AVS yielding a full-screen video, and output the full-screen video to a display device, wherein the controller is operative to instruct the decoder arrangement to switch from decoding the AVS to decoding the second channel. Related apparatus and methods are also described.

Abstract: A virtual channel table for broadcasting protocol and a method for broadcasting by using the virtual channel table includes identification information identifying and permitting discrimination of active and inactive channels contained in the virtual channel table. At a receiver, the virtual channel table transmitted from the transmitting side is parsed, thereby determining whether the current received channel is an active or inactive channel.

Abstract: A services gateway includes a processor configured to send a request for a video-on-demand content, receive a first content stream from a video-on-demand content server, and process the first content stream to retrieve the video-on-demand content. The first content stream includes the video-on-demand content and is protected with a first digital rights management scheme. The processor is further configured to encode the video-on-demand content in a second content stream, and provide the second content stream over a local area network to a playback device. The second content stream is protected with a second digital rights management scheme. In an embodiment, the processor can be further configured to store the video-on-demand content in a mass storage.

Abstract: Disclosed are a broadcasting processing apparatus and a control method of the same. The broadcasting processing apparatus including: a broadcasting receiver which receives a broadcasting signal including contents and additional information about the contents; a condition access module which descrambles the contents if the contents have been scrambled; and a controller which controls the broadcasting receiver to receive the broadcasting signal during a power-off mode, and stores contents information about a shunning function that prevents the inputting of the contents to the condition access module among the received additional information.

Abstract: A content transmitter apparatus is provided which decides whether to permit a content receiver apparatus at a content transmission destination to retransmit content to another content receiver apparatus located inside a house and transmits to the content receiver apparatus the content along with an identifier indicating a permission or prohibition of the content retransmission. A content receiver apparatus is also provided which, when it receives encrypted content from the content transmitter apparatus, checks an identifier received together with the content in executing the content retransmission to another content receiver apparatus located outside the house. If the identifier is found to permit the content retransmission, the content receiver apparatus encrypts and retransmits the content to the outside-house content receiver apparatus. If the identifier is found to not permit the content retransmission, the content receiver apparatus does not retransmit the content to the outside of the house.

Abstract: Systems and methods of controlling and optimizing system latency in order to minimize system latency between remotely operating computing devices over a communications network are disclosed. A method of controlling and optimizing latency over a computer network from a first computing device to a second computing device includes identifying a condition associated with the transmission of a video signal, receiving the video signal at a computing device, determining whether the condition is met after receiving the video signal, and displaying the video signal on a display device when the condition is met.

Abstract: An approach is provided to receive a request at a first computer system from a second system. The first system generates an encryption key, modifies retrieved source code by inserting the generated encryption key into the source code, and compiles the modified source code into an executable. A hash value of the executable program is calculated and is stored along with the encryption key in a memory area. The executable and the hash value are sent to the second system over a network. The executable is executed and it generates an encrypted result using the hash value and the embedded encryption key. The encrypted result is sent back to the first system where it is authenticated using the stored encryption key and hash value.

Abstract: The apparatus for dynamic update of a software-based IPTV conditional access system includes: a server master key manager managing a master key and encrypting a conditional access code ID; a conditional access server manager generating and managing a server list, linking and storing an update policy with the conditional access server IDs included in the server list, and controlling execution of the conditional access server; and a conditional access code download server generating an ID map of set of conditional access codes by combining the plurality of conditional access codes and the plurality of conditional access code IDs that are encrypted, and transmitting the ID map of set of conditional access codes and the conditional access code to a receiver.

Abstract: A networked Conditional Access Module provided on an IEEE 1394 network, by defining a Conditional Access Module as a Conditional Access Subunit of the IEEE 1394 network. There is provided an AV/C Conditional Access Commands to allow communication between the Conditional Access Subunit and other Subunits on the network. The Conditional Access Subunit is configured to receive AV/C Conditional Access Commands over the IEEE 1394 network from another subunit, and means to is also configured to transmit AV/C responses over the IEEE 1394 network in response to the received AV/C Conditional Access Commands.

Abstract: The subject disclosure provides for user account authorization in conjunction with online multimedia television content services. By way of example, a network-enabled television device can request a video identification code in response to a power-on event. A set of video data comprising a picture of a distinct identification code can be received from a network server in response to the request. The video data can be played on a video display of the television device, to facilitate verifying that a user or viewer of the television device maintains a subscription account associated with online multimedia television services. Upon successful verification, the television device can be linked with the subscription account, and promotional content or services associated with the verification can be allocated to the subscription account.

Abstract: A broadcast receiving apparatus comprises a broadcast receiving unit (1, 4˜13) for receiving a digital broadcast; a communication unit (1˜3) for performing two-way communication through a network; an operation unit 15 for performing an acquisition operation of a key for decrypting an encrypted broadcast program received by the broadcast receiving unit; and an address generating unit 16 for generating an address of an acquisition location of the key which is accessible with the communication unit, by using program arrangement information corresponding to the broadcast program based on the acquisition operation of a key by the operation unit.

Abstract: A streaming video server generates a virtual file system that includes virtual addresses of a plurality of encrypted segments of a plurality of video programs at each of a plurality of bitrates, without storing the plurality of encrypted segments in persistent storage. A request is received from a client device to access a selected one of the plurality of video programs via a request to access the virtual file system. The plurality of encrypted segments of the selected one of the plurality of video programs are generated at a selected bitrate, in response to the request.

Abstract: A streaming system includes an authoring unit (2), a stream server (3) and a client terminal (5). The authoring unit generates a file composed of encrypted contents data and the ancillary information at least containing the packetizing control information for generating an RTP packet, a non-encrypted codec dependent header made up of the information pertinent to encoded contents data, and the encryption information for decrypting the encrypted contents data form packet to packet. The streaming server packetizes the encrypted contents data along with at least the codec dependent header and distributes the resulting data as a stream. The client terminal refers to the codec dependent header of the received packet, re-assembles the packet, and decrypts the encrypted contents data of the re-assembled packet to generate contents data.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: Embodiments of the present invention provide for the copy protection of distributed material after conditional access is applied, regardless of where the material is distributed. The solutions described provide the advantage of being sufficiently simple in implementation to qualify as “curb high” solutions. “Curb high” solutions provide a range of security from minimal security to a high level of security while requiring relatively fewer system resources to implement than prior approaches.

Abstract: Embodiments of the present invention disclose a method and an authentication server for verifying an access identity of a set-top box, and relate to the field of communication technologies The method of the present invention includes: receiving a verification request message sent by a set-top box, where the verification request message carries first identity cipher text information of the set-top box, software version information of the set-top box, and a user serial number, and the first identity cipher text information is generated by the set-top box according to identity information of the set-top box by using a first encryption algorithm; obtaining the identity information of the set-top box from the first identity cipher text information according to the user serial number by using a preset first decryption algorithm; and verifying the identity information of the set-top box according to the software version information.

Abstract: Systems, methods, and receiver devices enable broadcasters with restricted content license areas (e.g., Designated Market Areas (“DMAs”) to distribute content via Over the Top (“OTT”) IP networks. Embodiments enable client reporting and authentication as well as broadcast content encryption. In an embodiment, information from the client may be reported back to the broadcasters, such as a view history/use report. In an embodiment, hand off between DMAs may be enabled. In an embodiment, local advertisement insertion in network content may be enabled. Embodiments may enable Multicast-Broadcast Single Frequency Network (“MBSFN”) operation across DMA boundaries.

Abstract: A method and system for ordering content includes a mobile device having an ordering interactive interface having available content including linear content and on-demand content. The interactive interface receives a content selection corresponding to the on-demand content from the interactive interface and communicates the selection to a content processing system. The content processing system communicates a control word to the user device. A user device receives the on-demand content corresponding to the selection in response to the control word.

Abstract: A television program ratings method and system includes transferring information associated with households from a cable provider to a ratings provider such that the ratings provider has access to information associated with sampled households and lacks access to information associated with non-sampled households. To this end, identity information and usage information associated with the households are respectively anonymized and encrypted. Knowledge of the identities of the sampled households enables the anonymized identity information and the encrypted usage information for the sampled households to be respectively de-anonymized and decrypted. The ratings provider knows which households are sampled households. As such, the ratings provider de-anonymizes and decrypts the information associated with the sampled households and then uses the de-anonymized and decrypted information to determine television program ratings.

Abstract: The present invention provides multi media video streams via high speed internet to a worldwide audience by using a specialized automation system with audio and video switching capabilities. This system provides video media streams to multiple platforms such as, cell phones, internet websites, and cable television subscribers.

Abstract: A system that incorporates teachings of the present disclosure may include, for example, a gateway comprising a controller to receive from a communication device a request for media content, receive a key and a record associated with the communications device from an interactive television system, wherein the record comprises a list of entitled media content, determine whether the requested media content is in the list of entitled media content, retrieve the requested media content from the interactive television system when the requested media content is determined to be in the list of entitled media content, encrypt the retrieved media content utilizing the key, and transmit the encrypted media content to the communications device. Other embodiments are disclosed.