Abstract: A broadcast receiving system is disclosed that verifies a current digital certificate extracted from a digital broadcast signal using a previous digital certificate previously stored as trusted. The current and previous digital certificates are associated with digital signatures with which data received with the broadcast signal has been signed. Also disclosed is a system for signing application data to be broadcast together with a digital certificate in a digital broadcast signal. A current digital certificate attesting the validity of a digital signature attached to broadcast data is in turn signed with a digital signature using one or more previous private keys associated with respective previous certificates identifying the issuer of the current digital certificate. These disclosures are in particular applicable to HbbTV.

Abstract: A method and a cryptographic device for encrypting/decrypting an input message by using an algorithm having as entries, said input message, a cryptographic key, and a complementary unique value used as parameter of the algorithm. The output data is formed by the input message decrypted/encrypted by the algorithm using the cryptographic key and the complementary value. The latter is determined on the basis of a unique value physically bound to an electronic device by using a physically unclonable function (PUF) which is inherent to this device and which is used to generate this unique value from a plurality of physical measurements carried out on components integrated in said device.

Abstract: The present invention relates to a method for processing data in a communication device comprising a host and a security module associated with this host. This method comprises the steps of generating, by the security module, a plurality of initial keys from an initial keys generation function, and of transmitting said plurality of initial keys to said corresponding host. For each initial key received by the host, the method comprises a step of generating a plurality of encryption keys by an extension module of said host, by using an extension function. The method further comprises the steps of receiving the data to be processed by said host and of combining said data to be processed with said encryption keys, in a combination module of said host.

Abstract: A system and method to watermark a compressed content encrypted by at least one content key, said content key as well as pre-marking data forming Conditional Access System (CAS) data, said CAS Data being encrypted by a transmission key and comprising at least one signature to authenticate all or part of the CAS Data, said compressed content being received by a client device comprising: a Descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a Watermark (WM) inserter directly connected to the output of the Descrambler, said Descrambler and said WM inserter being connected with a Conditioner, said Conditioner executing the following steps: receiving the CAS Data, decrypting the CAS Data with the transmission key, verifying the signature of the CAS Data, and if the signature is valid, transferring the content key to the descrambler and the pre-marking data to the WM inserter, and watermarking by the WM inserter, the decrypted content received by t

Abstract: The present invention concerns a method for building a watermarked content for sending to at least one user unit having a user unit identifier, the watermarked content comprising a first series of packets, at least some from the first series of packets being available in at least two different qualities, wherein said method comprises the steps of: generating a watermark based on at least the user unit identifier, the watermark being formed by a first series of values from a predetermined set of values; mapping each of the at least two different qualities to one from the predetermined set of values; building the watermarked content by sequentially selecting from the first series of packets, a packet having a quality corresponding to each value from the first series of values forming the watermark. It further concerns a method for transmitting such a watermarked content.

Abstract: A method to identify content within a data stream, comprising: capturing a data stream, analyzing and filtering the data stream by isolating a test stream of the data stream and disabling the other sub-streams, applying the test stream to the application so as to produce an output, applying the output to a comparator, the comparator receiving a reference and determining by the comparator a distance between the application output and the reference, if the distance is below a predefined level, repeating the isolating step with a new test stream selected among the previous test stream, the new test stream being a subset of the previous test stream, if that the distance is above or equal a second predefined level, repeating the isolating step by selecting a different test stream from the data stream not already applied to the application.

Abstract: The present invention proposes a method to mark and exploit at least one sequence record of a video presentation played on a multimedia unit, said method comprising the steps of: during the video presentation, receiving a command from a user to mark a currently displayed video sequence, said command initiating the step of: creating a sequence record comprising a time index or frame index, allowing to locate the proper part of the video presentation, and a reference of the video presentation. At a later stage, requesting the edition of the sequence record by: adding textual information which corresponds to the actual sequence, and storing the sequence record.

Abstract: The present invention provides a security module having a communication interface being capable of operating according to any from a selection from a plurality of predetermined operation modes or communication protocols. The security module further comprises a voltage detector to detect the voltage on the module's power supply connection. Depending on the value of the detected voltage or to which of a plurality of predetermined voltage ranges the detected voltage may be categorized, the security module is made to function according to one from the plurality of predetermined communication protocols. According to an embodiment of the present invention the plurality of communication protocols require that the security module operate at a plurality of different frequencies.

Abstract: A system and method to watermark an uncompressed content received at a client device in a compressed form and encrypted by at least one content key, said content key as well as watermark instruction forming Conditional Access Module (CAS) data, said CAS data being encrypted by a transmission key and comprising at least one signature to authenticate the CAS data, said client device comprising a CAS configured to process the CAS data, a descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a decoder to convert the compressed content into uncompressed content, a watermark inserter connected to the output of the decoder, a secure activation module connected with the watermark inserter, a secure element connected with the watermark inserter and the secure activation module.

Abstract: A decoder comprises an input interface for receiving audio-video content in a compressed form, an output interface for outputting said compressed audio-video content, at least one application frame relating to at least one application service, and control data, wherein the control data comprises identification data and implementation data, the identification data being used for identifying at least a part of the audio-video content and/or a part of the at least one application frame, and the implementation data defining the rendering of at least one of the audio-video content and the at least one application frame.

Abstract: A method for generating a value inherent to an electronic circuit by measuring a physical quantity carried out on components of the electronic circuit, comprising calculating and associating to each component at least one value derived from a series of measurements carried out on said component, the calculating of the at least one value comprising: determining a statistical value from said series of measurements, defining said value derived from the series of measures as being said statistical value or an uncertainty range calculated from said statistical value, forming a collection of invariable pairs of components, selecting, in said collection, pairs so that said values associated to the components of each one of these pairs are spaced from each other by at least a setpoint value, generating said value inherent to the electronic circuit by concatenating the results of comparisons based on at least one of the values associated to the components of each selected pair, and data among which at least one is der

Abstract: A method and a receiver device configured to mark a media content sequence comprising a succession of media frames. A decoder included in the receiver device selects at least two decoded consecutive media frames from the media content sequence according to a predefined information code previously stored in a configuration setting memory of the receiver device. A marking module associated to the decoder inserts a transition effect between the at least two selected decoded consecutive media frames including a preceding media frame and at least one immediately following media frame. The transition effect is retrieved from a library of transition effects stored in a memory associated to the marking module and applied on the basis of the preceding media frame and the at least one immediately following media frame.

Abstract: A method and a security module configured to enforce processing of management messages. The security module is associated to a multimedia receiver configured to receive broadcast access controlled multimedia services. The management messages are transmitted by a managing center to the multimedia receiver.

Abstract: Method to detect cloned software being used on a client user unit. An initialization phase comprises: defining a tag value as being equal to an initial random value, opening a new record storing the tag value and introducing the tag value into the client user unit. An operating phase comprises: preparing a client message comprising the request and a value depending on the tag value; sending the client message to the server; and checking if the tag value of the client message is correct with respect to the stored tag value. If they do not match, the requested service is denied. If they do match, the method sends a server message to the user unit; updates the tag value with a new tag value; and stores the new tag value on the server and user unit.

Abstract: The plastic sheet (22), involved in the formation of a plurality of smart cards which respectively include a plurality of electronic units, is formed of a first material (2), having a first hardness or a first Vicat softening temperature, and of a second material (6) having a second hardness lower than the first hardness, respectively a second Vicat softening temperature lower than the first Vicat softening temperature. The second material is located in a plurality of areas of the plastic sheet which are respectively intended to at least partially receive said plurality of electronic units, via penetration of this plurality of electronic units into the second material during fabrication of the plurality of smart cards.

Abstract: A method for initiating a transmission of a program stream for delivery from a local access point to a client device, said program stream being structured as a plurality of regular segments relating to a single event. This method comprises the steps of: processing at least one of the regular segments into a set of particular segments, where the at least one regular segment carries a payload of a first playback duration and the payload of said set represents a second playback duration that is greater than that of the first playback duration, and where the second playback duration is sufficient to comply with a client device requirement for initiating a rendering of the event, and transmitting, during an initial period, from the local access point said set of particular segments.

Abstract: An integrated circuit chip and a method for protecting the integrated circuit chip against physical and/or electrical alterations are disclosed. The chip comprises at least one semiconductor layer including semiconductor components and conductive tracks, at least one layer formed by a first type of conductive tracks extending over all or part of a surface of the chip and at least one second type of conductive track connected to at least one detection circuit configured to detect an alteration of the at least one second type of conductive track. The chip is characterized in that the at least one first type of conductive track is mixed within the at least one second type of conductive track, the material and the layout of at least one second type of conductive track being indiscernible, by an observation device, from the material and the layout of the at least one first type of conductive track.

Abstract: The present invention relates to a method for processing data in a communication device comprising a host and a security module associated with this host. This method comprises the steps of generating, by the security module, a plurality of initial keys from an initial keys generation function, and of transmitting said plurality of initial keys to said corresponding host. For each initial key received by the host, the method comprises a step of generating a plurality of encryption keys by an extension module of said host, by using an extension function. The method further comprises the steps of receiving the data to be processed by said host and of combining said data to be processed with said encryption keys, in a combination module of said host. The invention further concerns a communication device and a communication system allowing for the implementation of this method, as well as a method allowing the secure exchange of data between two communication devices.

Abstract: The present invention aims to improve data protection against illegal access by a strong differentiation of the security level specific on a type of data so that when the protection on a part of the data is violated, the remaining data are still inaccessible. A method for controlling access, via an open communication network, to user private data, comprising steps of: dividing the user private data into a plurality of categories, each category defining a privacy level of the data, encrypting the user private data of each category with a category key pertaining to the category of the data, attributing to a stakeholder an entity configured for accessing to at least one category of user private data, and authorizing the access to the at least one category of user private data for the entity of the stakeholder, by providing the stakeholder with the category keys required for decrypting the user private data of the corresponding category.

Abstract: The present invention proposes a method to mark and exploit at least one sequence record of a video presentation played on a multimedia unit, said method comprising the steps of: during the video presentation, receiving a command from a user to mark a currently displayed video sequence, said command initiating the step of: creating a sequence record comprising a time index or frame index, allowing to locate the proper part of the video presentation, and a reference of the video presentation. At a later stage, requesting the edition of the sequence record by: adding textual information which corresponds to the actual sequence, and storing the sequence record.