Abstract: Secure Programming of Secret data A method is provided. The method comprises providing a device comprising a secure element coupled to a non-volatile memory, the non-volatile memory comprising a first cryptographic key stored therein; the secure element decrypting and authenticating first secret data using the first cryptographic key to form second secret data; and then rendering the true value of the first cryptographic key unreadable.

Abstract: Method for securing control words within a decoder in charge of descrambling digital content protected by these control words, comprising the following steps: for each descrambling unit of this decoder, loading in a directory a pairing key referenced by an identifier associating said key to a descrambling unit; receiving at least one encrypted control word referenced by an indication allowing to identify the descrambling unit for which it is intended; decrypting the control word by using a first key shared with a security module; identifying in the directory the pairing key whose identifier corresponds to the indication of destination associated to the control word; encrypting this control word by using this pairing key; and storing in a register the control word in a chronological and referenced way.

Abstract: A system and method to watermark a compressed content encrypted by at least one content key, said content key as well as pre-marking data forming Conditional Access System (CAS) data, said CAS Data being encrypted by a transmission key and comprising at least one signature to authenticate all or part of the CAS Data, said compressed content being received by a client device comprising: a Descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a Watermark (WM) inserter directly connected to the output of the Descrambler, said Descrambler and said WM inserter being connected with a Conditioner, said Conditioner executing the following steps: receiving the CAS Data, decrypting the CAS Data with the transmission key, verifying the signature of the CAS Data, and if the signature is valid, transferring the content key to the descrambler and the pre-marking data to the WM inserter, and watermarking by the WM inserter, the decrypted content received by t

Abstract: A system and method to watermark an uncompressed content received at a client device in a compressed form and encrypted by at least one content key, said content key as well as watermark instruction forming Conditional Access Module (CAS) data, said CAS data being encrypted by a transmission key and comprising at least one signature to authenticate the CAS data, said client device comprising a CAS configured to process the CAS data, a descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a decoder to convert the compressed content into uncompressed content, a watermark inserter connected to the output of the decoder, a secure activation module connected with the watermark inserter, a secure element connected with the watermark inserter and the secure activation module.

Abstract: A system and method to watermark an uncompressed content received at a client device in a compressed form and encrypted by at least one content key, said content key as well as watermark instruction forming Conditional Access Module (CAS) data, said CAS data being encrypted by a transmission key and comprising at least one signature to authenticate the CAS data, said client device comprising a CAS configured to process the CAS data, a descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a decoder to convert the compressed content into uncompressed content, a watermark inserter connected to the output of the decoder, a secure activation module connected with the watermark inserter, a secure element connected with the watermark inserter and the secure activation module.

Abstract: A method to protect a device key in a device comprising at least one secure element locally connected to at least one time programmable memory storing a global value in form of a bit string comprising locked bits and unlocked bits. The locked bits are irreversibly pre-programmed in the one-time-programmable memory during an initialization phase of the device while the unlocked bits remaining in an initial state may be programmable by the secure element. The secure element is configured to generate, at initialization of the device, a device specific value by using the global value, program the device specific value previously obtained in the one time programmable memory, and erase the global value by programming the unlocked bits of the corresponding bit string. A further object of the disclosure includes a device configured to carry out the method.

Abstract: A system and method to watermark a compressed content encrypted by at least one content key, said content key as well as pre-marking data forming Conditional Access System (CAS) data, said CAS Data being encrypted by a transmission key and comprising at least one signature to authenticate all or part of the CAS Data, said compressed content being received by a client device comprising: a Descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a Watermark (WM) inserter directly connected to the output of the Descrambler, said Descrambler and said WM inserter being connected with a Conditioner, said Conditioner executing the following steps: receiving the CAS Data, decrypting the CAS Data with the transmission key, verifying the signature of the CAS Data, and if the signature is valid, transferring the content key to the descrambler and the pre-marking data to the WM inserter, and watermarking by the WM inserter, the decrypted content received by t

Abstract: A system and method to watermark an uncompressed content received at a client device in a compressed form and encrypted by at least one content key, said content key as well as watermark instruction forming Conditional Access Module (CAS) data, said CAS data being encrypted by a transmission key and comprising at least one signature to authenticate the CAS data, said client device comprising a CAS configured to process the CAS data, a descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a decoder to convert the compressed content into uncompressed content, a watermark inserter connected to the output of the decoder, a secure activation module connected with the watermark inserter, a secure element connected with the watermark inserter and the secure activation module.

Abstract: A system and method to watermark a compressed content encrypted by at least one content key, said content key as well as pre-marking data forming Conditional Access System (CAS) data, said CAS Data being encrypted by a transmission key and comprising at least one signature to authenticate all or part of the CAS Data, said compressed content being received by a client device comprising: a Descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a Watermark (WM) inserter directly connected to the output of the Descrambler, said Descrambler and said WM inserter being connected with a Conditioner, said Conditioner executing the following steps: receiving the CAS Data, decrypting the CAS Data with the transmission key, verifying the signature of the CAS Data, and if the signature is valid, transferring the content key to the descrambler and the pre-marking data to the WM inserter, and watermarking by the WM inserter, the decrypted content received by t

Abstract: A system and method to watermark an uncompressed content received at a client device in a compressed form and encrypted by at least one content key, said content key as well as watermark instruction forming Conditional Access Module (CAS) data, said CAS data being encrypted by a transmission key and comprising at least one signature to authenticate the CAS data, said client device comprising a CAS configured to process the CAS data, a descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a decoder to convert the compressed content into uncompressed content, a watermark inserter connected to the output of the decoder, a secure activation module connected with the watermark inserter, a secure element connected with the watermark inserter and the secure activation module.

Abstract: A system and method to watermark an uncompressed content received at a client device in a compressed form and encrypted by at least one content key, said content key as well as watermark instruction forming Conditional Access Module (CAS) data, said CAS data being encrypted by a transmission key and comprising at least one signature to authenticate the CAS data, said client device comprising a CAS configured to process the CAS data, a descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a decoder to convert the compressed content into uncompressed content, a watermark inserter connected to the output of the decoder, a secure activation module connected with the watermark inserter, a secure element connected with the watermark inserter and the secure activation module.

Abstract: A method for watermarking digital media content received in a form of at least one encrypted sample to which metadata is assigned. Each sample is encrypted by means of a sample key. The metadata comprises first data, second data and a signature resulting from the first and second data. The first data is encrypted by a transport key and comprises at least a content key and watermarking metadata. The second data comprises an initialization vector so that the content key and the initialization vector form a unique pair of cryptographic data equivalent to the sample key. The method comprises the steps of extracting the metadata from the media content, decrypting the first data by using the transport key, authenticating the signed data and, in case of positive outcome, descrambling each sample by using the pair of cryptographic data, and marking each descrambled sample by using the watermarking metadata.

Abstract: A system and method for securely loading data in a cache memory associated with at least one secure processor that performs data processing by using at least one untrusted external memory storing data to be processed, at least one secure internal cache memory to load or store data, and at least one secure cache translator operating as a memory management unit. The secure cache translator stores, into a secure cache digest table, parameters arranged on persistent and variable data pages. The parameters comprise at least a root digest based on node digests calculated on at least one persistent data page according to a Merkle tree structure. The integrity of the data pages is verified during transfers between the secure internal cache memory and the external memory by comparing a calculated root digest with the root digest stored in the secure cache digest table.

Abstract: Method for securing control words within a decoder in charge of descrambling digital content protected by these control words, comprising the following steps: for each descrambling unit of this decoder, loading in a directory a pairing key referenced by an identifier associating said key to a descrambling unit; receiving at least one encrypted control word referenced by an indication allowing to identify the descrambling unit for which it is intended; decrypting the control word by using a first key shared with a security module; identifying in the directory the pairing key whose identifier corresponds to the indication of destination associated to the control word; encrypting this control word by using this pairing key; and storing in a register the control word in a chronological and referenced way.

Abstract: A method to enforce watermarking instructions by a security module in a receiving device, comprising the steps of receiving a security message by—a security module, comprising at least a content key, watermark instructions and security message signature, said watermark instruction activates or deactivates a watermarking module, decrypting—a security message with a transmission key, verifying—a security message signature, and in case of successful verification, reading a watermarking data from the watermarking module, verifying the authenticity of the watermarking data, and in case of successful verification, transmitting the watermark instructions to the watermark module and the content key to a descrambling module.

Abstract: A system and method to watermark an uncompressed content received at a client device in a compressed form and encrypted by at least one content key, said content key as well as watermark instruction forming Conditional Access Module (CAS) data, said CAS data being encrypted by a transmission key and comprising at least one signature to authenticate the CAS data, said client device comprising a CAS configured to process the CAS data, a descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a decoder to convert the compressed content into uncompressed content, a watermark inserter connected to the output of the decoder, a secure activation module connected with the watermark inserter, a secure element connected with the watermark inserter and the secure activation module.

Abstract: A method for watermarking digital media content received in a form of at least one encrypted sample to which metadata is assigned. Each sample is encrypted by means of a sample key. The metadata comprises first data, second data and a signature resulting from the first and second data. The first data is encrypted by a transport key and comprises at least a content key and watermarking metadata. The second data comprises an initialization vector so that the content key and the initialization vector form a unique pair of cryptographic data equivalent to the sample key. The method comprises the steps of extracting the metadata from the media content, decrypting the first data by using the transport key, authenticating the signed data and, in case of positive outcome, descrambling each sample by using the pair of cryptographic data, and marking each descrambled sample by using the watermarking metadata.

Abstract: A system and method to watermark a compressed content encrypted by at least one content key, said content key as well as pre-marking data forming Conditional Access System (CAS) data, said CAS Data being encrypted by a transmission key and comprising at least one signature to authenticate all or part of the CAS Data, said compressed content being received by a client device comprising: a Descrambler having an input to receive the encrypted compressed content and an output to produce an compressed content, a Watermark (WM) inserter directly connected to the output of the Descrambler, said Descrambler and said WM inserter being connected with a Conditioner, said Conditioner executing the following steps: receiving the CAS Data, decrypting the CAS Data with the transmission key, verifying the signature of the CAS Data, and if the signature is valid, transferring the content key to the descrambler and the pre-marking data to the WM inserter, and watermarking by the WM inserter, the decrypted content received by t

Abstract: A system and method for securely loading data in a cache memory associated with at least one secure processor that performs data processing by using at least one untrusted external memory storing data to be processed, at least one secure internal cache memory to load or store data, and at least one secure cache translator operating as a memory management unit. The secure cache translator stores, into a secure cache digest table, parameters arranged on persistent and variable data pages. The parameters comprise at least a root digest based on node digests calculated on at least one persistent data page according to a Merkle tree structure. The integrity of the data pages is verified during transfers between the secure internal cache memory and the external memory by comparing a calculated root digest with the root digest stored in the secure cache digest table.

Abstract: A method to enforce watermarking instructions by a security module in a receiving device, comprising the steps of receiving a security message by—a security module, comprising at least a content key, watermark instructions and security message signature, said watermark instruction activates or deactivates a watermarking module, decrypting—a security message with a transmission key, verifying—a security message signature, and in case of successful verification, reading a watermarking data from the watermarking module, verifying the authenticity of the watermarking data, and in case of successful verification, transmitting the watermark instructions to the watermark module and the content key to a descrambling module.