Abstract: A method of managing the processing of a digital broadcast transport stream by a multimedia unit identified by a personal identifier. The multimedia unit being connectable to a security module associated to the multimedia unit and/or a server through an IP-connection with a return path. The transport stream comprising scrambled content packets and conditional access messages that are necessary for descrambling the content packets. The method comprises: sending the conditional access messages from the multimedia unit to either the server or the security module; verifying the authentication of the multimedia unit and/or the validity of access rights allocated to the multimedia unit; if the authentication fails, preventing any further processing of the conditional access message; securely obtaining, at the multimedia unit, the control data corresponding to the conditional access messages; and descrambling the audio/video/data content packets using the control data at the multimedia unit.

Abstract: Methods and systems of paying for content, such as, for example, audio and/or video content, are presented. In an example method, a task to be executed using at least one device resource associated with a user device is provided. Also, the task is to be executed during streaming of a content item. The streaming of the content item to the user device is caused to terminate in response to a determination that the execution of the task using the at least one device resource has been terminated.

Abstract: Disclosed herein are methods and systems for validating an autonomous system that comprises a static-code module and a dynamic-code module, the method including the steps of performing a code-integrity-validation process on the static-code module and performing a behavior-integrity-validation process on the dynamic-code module. In some embodiments, performing the code-integrity-validation process on the static-code module includes performing a signature-verification process on the static-code module. In some embodiments, performing the behavior-integrity-validation process on the dynamic-code module includes using an encrypted-and-signed test vector.

Abstract: A method to protect a media content encrypted by a media content key, said method being carried out by a security module embedded into a reception device and connected to a consumption device, comprising: receiving an encrypted media content, encrypted by a media content key; receiving a message, being encrypted by a personal key of the security module, containing the media content key; decrypting the message by the personal key to retrieve the media content key; decrypting the encrypted media content by the media content key; generating a current local key; encrypting a portion of the media content by the current local key, said portion defining a chunk; transmitting the current local key to the consumption device; transmitting the encrypted chunk to the consumption device; repeating the previous four steps for different chunks of the media content and modifying the current local key for the different chunks.

Abstract: A method is disclosed for controlling the operating of a consumption appliance by way of a selector switch controlled by an energy saving device connected to a management center. The consumption appliance is kept in its default power mode, until receiving, by the energy saving device, an authentic secured control message sent by the management center. This message includes a command onto the mode in which the consumption appliance has to be switched. A counter is initialized with an initialization value before to be triggered. The consumption appliance is switched in the mode indicated by the command, either until the counter has reached a threshold value, or until receiving another authentic control message. If the counter has reached the threshold value, then the consumption appliance is switched in its default power mode. If another authentic secured control message has been received, then returning to the step of initializing the counter.

Abstract: Method for securing control words within a decoder in charge of descrambling digital content protected by these control words, comprising the following steps: for each descrambling unit of this decoder, loading in a directory a pairing key referenced by an identifier associating said key to a descrambling unit; receiving at least one encrypted control word referenced by an indication allowing to identify the descrambling unit for which it is intended; decrypting the control word by using a first key shared with a security module; identifying in the directory the pairing key whose identifier corresponds to the indication of destination associated to the control word; encrypting this control word by using this pairing key; and storing in a register the control word in a chronological and referenced way.

Abstract: The present invention provides a security module having a communication interface being capable of operating according to any from a selection from a plurality of predetermined operation modes or communication protocols. The security module further comprises a voltage detector to detect the voltage on the module's power supply connection. Depending on the value of the detected voltage or to which of a plurality of predetermined voltage ranges the detected voltage may be categorized, the security module is made to function according to one from the plurality of predetermined communication protocols.

Abstract: A physical device, the possession of which may provide access to digital media content in a fashion similar to the possession of a DVD providing access to the media content stored thereupon on a suitable DVD player. The possession of the physical device grants access to digital content stored on a remote server using a suitable device such as e.g., a set-top box or media player having Internet connectivity. The physical device provides for convenient and possibly anonymous access to content stored on a remote server and has certain advantages over known techniques for storing rights to access the content.

Abstract: A method to transfer a video stream from a host device comprising a controller configured for bulk transfers to a descrambling device, comprises: forming a chain out transfer comprising a chain out header linked with multiple chain out descriptors, the first chain out descriptor pointing to an out description packet containing at least one producer ID, the second and subsequent chain out descriptor pointing to chunks from the video stream, the last chain out descriptor being configured to generate an interrupt; forming a chain in transfer comprising a chain in header linked with a plurality of chain in descriptors, each chain in descriptor pointing to a descrambled chunk; requesting the controller to process the chain; receiving the description packet by the descrambling device and using key data associated with the chunks to descramble them; receiving by the controller the descrambled chunks and triggering an interrupt on the last chunk.

Abstract: The present invention describes a method to select an application on a first device having an NFC interface and comprising a plurality of applications using the NFC interface, said method comprising the steps of detecting a second device having a NFC interface via the NFC interface of the first device, obtaining via the NFC interface a message comprising a message type and a service identification, determining an application type based on the message type and the service identification, selecting at least one application among the plurality of applications matching the message type and the service identification, prompting a user of the first device to accept a communication between the second device and the selected application, in case of positive answer, notifying the selected application of the message type, establishing the communication between the selected application and the second device via the NFC interface.

Abstract: The invention relates to an external connector for the production of an electronic card comprising an insulating support that defines an outside face and an inside face opposite one another and a plurality of external metal contact pads. This external connector additionally comprises a plurality of metal projections located on the side of the inside face of the insulating support and respectively connected electrically to at least one subassembly of the plurality of external metal contact pads and/or to contact pads linked to an electronic unit, which is arranged on the inside face of the insulating support, wherein these metal projections are intended to be inserted into individual cavities of the body of the electronic card, and metal contact pads linked to an electronic unit inside the card body and/or an antenna incorporated in this card body are located at the base of these cavities.

Abstract: A user's access to software applications installed on a device is limited by evaluating the context in which the user requests access to the application and determining, based on the context analysis, whether or not the user is to be given access to the application. When it is determined that the user requesting access is not a primary authorized user, the primary authorized user may be notified of the attempt to access the application.

Abstract: This invention aims to propose a method and a system allowing to supply certified reliable information without the source of the information being transmitted to the applicant.

Abstract: Methods and systems of generating an image gradient are presented. In one example, image data for generating a two-dimensional digital image is provided to a hardware graphics processor. The image data may include a single pixel along a first direction of the digital image and multiple pixels along a second direction of the digital image. The pixels along the second direction of the digital image may include an image gradient. A one-dimensional stretching operation of the hardware graphics processor is initiated based on the image data to generate the digital image. In response to the stretching operation, the digital image may include multiple pixels along the first direction for each of the single pixels, wherein each of the multiple pixels along the first direction for a corresponding pixel of the single pixels comprises the corresponding pixel.

Abstract: A broadcast receiving system is disclosed that verifies a current digital certificate extracted from a digital broadcast signal using a previous digital certificate previously stored as trusted. The current and previous digital certificates are associated with digital signatures with which data received with the broadcast signal has been signed. Also disclosed is a system for signing application data to be broadcast together with a digital certificate in a digital broadcast signal. A current digital certificate attesting the validity of a digital signature attached to broadcast data is in turn signed with a digital signature using one or more previous private keys associated with respective previous certificates identifying the issuer of the current digital certificate. These disclosures are in particular applicable to HbbTV.

Abstract: A method and a cryptographic device for encrypting/decrypting an input message by using an algorithm having as entries, said input message, a cryptographic key, and a complementary unique value used as parameter of the algorithm. The output data is formed by the input message decrypted/encrypted by the algorithm using the cryptographic key and the complementary value. The latter is determined on the basis of a unique value physically bound to an electronic device by using a physically unclonable function (PUF) which is inherent to this device and which is used to generate this unique value from a plurality of physical measurements carried out on components integrated in said device.

Abstract: The present invention relates to a method for processing data in a communication device comprising a host and a security module associated with this host. This method comprises the steps of generating, by the security module, a plurality of initial keys from an initial keys generation function, and of transmitting said plurality of initial keys to said corresponding host. For each initial key received by the host, the method comprises a step of generating a plurality of encryption keys by an extension module of said host, by using an extension function. The method further comprises the steps of receiving the data to be processed by said host and of combining said data to be processed with said encryption keys, in a combination module of said host.

Abstract: A system and method to watermark a compressed content encrypted by at least one content key, said content key as well as pre-marking data forming Conditional Access System (CAS) data, said CAS Data being encrypted by a transmission key and comprising at least one signature to authenticate all or part of the CAS Data, said compressed content being received by a client device comprising: a Descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a Watermark (WM) inserter directly connected to the output of the Descrambler, said Descrambler and said WM inserter being connected with a Conditioner, said Conditioner executing the following steps: receiving the CAS Data, decrypting the CAS Data with the transmission key, verifying the signature of the CAS Data, and if the signature is valid, transferring the content key to the descrambler and the pre-marking data to the WM inserter, and watermarking by the WM inserter, the decrypted content received by t

Abstract: The present invention concerns a method for building a watermarked content for sending to at least one user unit having a user unit identifier, the watermarked content comprising a first series of packets, at least some from the first series of packets being available in at least two different qualities, wherein said method comprises the steps of: generating a watermark based on at least the user unit identifier, the watermark being formed by a first series of values from a predetermined set of values; mapping each of the at least two different qualities to one from the predetermined set of values; building the watermarked content by sequentially selecting from the first series of packets, a packet having a quality corresponding to each value from the first series of values forming the watermark. It further concerns a method for transmitting such a watermarked content.

Abstract: The present invention proposes a method to mark and exploit at least one sequence record of a video presentation played on a multimedia unit, said method comprising the steps of: during the video presentation, receiving a command from a user to mark a currently displayed video sequence, said command initiating the step of: creating a sequence record comprising a time index or frame index, allowing to locate the proper part of the video presentation, and a reference of the video presentation. At a later stage, requesting the edition of the sequence record by: adding textual information which corresponds to the actual sequence, and storing the sequence record.