Abstract: The invention relates to a method of operating a device for forwarding protected content to a client unit, the device comprising at least one decryption module for decrypting protected content received in the device and at least one re-encryption module for re-encrypting the content to generate re-encrypted content to be sent to the client unit. The method comprises the steps of: (i) the decryption module authenticates the re-encryption module using authentication data transmitted from the re-encryption module to the decryption module, and (ii) the decryption module forwards decrypted content to the re-encryption module upon having successfully authenticated the re-encryption module. Moreover, the invention relates to a corresponding device.

Abstract: The invention relates to a method for accessing protected content provided to a client device, wherein the client device decrypts the content using at least one control word provided by a server device. In the method, (i) the client device sends a request message to the server device, the request message including a nonce, and the client device stores the nonce; (ii) upon receipt of the request message, the server device generates a control word message based on the control word and the received nonce; (iii) upon receipt of the control word message, the client device determines the control word from the control word message and validates the control word message using the stored nonce; and (iv) the client device uses the control word to decrypt at least part of the content in response to a successful validation of the control word message. Moreover, the invention relates to a client device and a server device for carrying out the method.

Abstract: The invention relates to a device for decrypting protected content and for providing the decrypted content for playback. The device comprises one or more system software modules providing functions for facilitating the decryption of the protected content and at least one client software module assigned to a provider of protected content. The client software module is adapted to access functions of the system software modules in order to control the system software to decrypt the protected content of the provider. Moreover, the device is adapted to validate the system software and/or a further client software module and to prevent the decryption and/or provision of the protected content of the provider, if the system software and/or the further client software module are not validated successfully.

Abstract: The invention relates to a device for accessing protected content, the device comprising a secure module for accessing the protected content and a control unit external to the secure module for controlling access operations for the protected content. The device is configured to receive usage rights data for the protected content, the usage rights data including first and second usage rights data defining permissions for uses of the protected content, and the device is configured to enable a requested use of the protected content upon a check whether the use is permitted by usage rights data, the check being made in the secure module based on to the first usage rights data and the check being made in the control unit based on the second usage rights data. Moreover, the invention relates to a method for operating the device.

Abstract: The invention relates to a device for validating data using a root certificate, wherein a plurality of root certificates is stored in the device, each root certificate having a rank. The device is configured to receive revocation information indicating at least one revoked root certificate, to validate the revocation information using one of the root certificates stored in the device and to block the use of the revoked root certificate if the revocation information is successfully validated using a root certificate having a higher rank than the revoked root certificate. Moreover, the invention relates to a method for revoking a root certificate stored in a device.

Abstract: The invention relates to a device for decrypting protected content and for providing the decrypted content for playback, the device comprising a secure module for carrying out cryptographic operations including the decryption of the protected content using decryption information, and the device being configured to install therein at least one client software module assigned to a provider of protected content, the client software module being adapted to forward decryption information for decrypting the protected content of the provider to the secure module in an encrypted form. The secure module is adapted to store therein a public key assigned to the provider and to authenticate at least one link key provided by the content provider using the stored public key.

Abstract: The invention relates to a device for accessing protected content, the device comprising a secure module for accessing the protected content and a control unit external to the secure module for controlling access operations for the protected content. The device is configured to receive usage rights data for the protected content, the usage rights data including first and second usage rights data defining permissions for uses of the protected content, and the device is configured to enable a requested use of the protected content upon a check whether the use is permitted by usage rights data, the check being made in the secure module based on to the first usage rights data and the check being made in the control unit based on the second usage rights data. Moreover, the invention relates to a method for operating the device.

Abstract: The invention relates to a method for accessing protected content provided to a client device, wherein the client device decrypts the content using at least one control word provided by a server device. In the method, (i) the client device sends a request message to the server device, the request message including a nonce, and the client device stores the nonce; (ii) upon receipt of the request message, the server device generates a control word message based on the control word and the received nonce; (iii) upon receipt of the control word message, the client device determines the control word from the control word message and validates the control word message using the stored nonce; and (iv) the client device uses the control word to decrypt at least part of the content in response to a successful validation of the control word message. Moreover, the invention relates to a client device and a server device for carrying out the method.

Abstract: The invention relates to a method of operating a device for forwarding protected content to a client unit, the device comprising at least one decryption module for decrypting protected content received in the device and at least one re-encryption module for re-encrypting the content to generate re-encrypted content to be sent to the client unit. The method comprises the steps of: (i) the decryption module authenticates the re-encryption module using authentication data transmitted from the re-encryption module to the decryption module, and (ii) the decryption module forwards decrypted content to the re-encryption module upon having successfully authenticated the re-encryption module. Moreover, the invention relates to a corresponding device.

Abstract: The invention relates to a device for decrypting protected content and for providing the decrypted content for playback, the device comprising a secure module for carrying out cryptographic operations including the decryption of the protected content using decryption information, and the device being configured to install therein at least one client software module assigned to a provider of protected content, the client software module being adapted to forward decryption information for decrypting the protected content of the provider to the secure module in an encrypted form. The secure module is adapted to store therein a public key assigned to the provider and to authenticate at least one link key provided by the content provider using the stored public key.

Abstract: The invention relates to a device for validating data using a root certificate, wherein a plurality of root certificates is stored in the device, each root certificate having a rank. The device is configured to receive revocation information indicating at least one revoked root certificate, to validate the revocation information using one of the root certificates stored in the device and to block the use of the revoked root certificate if the revocation information is successfully validated using a root certificate having a higher rank than the revoked root certificate. Moreover, the invention relates to a method for revoking a root certificate stored in a device.

Abstract: The invention relates to a device for decrypting protected content and for providing the decrypted content for playback. The device comprises one or more system software modules providing functions for facilitating the decryption of the protected content and at least one client software module assigned to a provider of protected content. The client software module is adapted to access functions of the system software modules in order to control the system software to decrypt the protected content of the provider. Moreover, the device is adapted to validate the system software and/or a further client software module and to prevent the decryption and/or provision of the protected content of the provider, if the system software and/or the further client software module are not validated successfully.

Abstract: A system for distributing a signal carrying a plurality of services, the system comprises: a transmitter for generating numbering information pertaining to the plurality of services, for including the numbering information into the signal, and for transmitting the signal, a receiver for receiving the signal, for retrieving the numbering information from the signal, and for numbering services of the plurality of services in dependence of the numbering information.

Abstract: The invention relates to a method of downloading software programs into a storage unit. The software programs include a boot code and an application code, the boot code allowing downloading the application code. The storage unit comprises at least a current boot code and a current application code. The method comprises:—upon a download request, downloading a new boot code in a location, which does not overwrites the current boot code,—indicating that the new boot code replaces the current boot code,—downloading a new application code associated to the new boot code in a location, which does not overwrites the new boot code,—indicating that the new application code is valid.

Abstract: The invention relates to a transmission system (10) comprising a transmitter (12) and a receiver (14). The transmitter (12) is arranged for transmitting a plurality of signals (13), e.g. radio and/or television signals. The plurality of signals (13) comprise mutual corresponding signals, e.g. analog and digital signals of the same channel or program. Alternatively, the mutually corresponding signals may comprise standard definition and high definition signals of the same channel or program. The receiver (14) is arranged for receiving at least part of said plurality of signals (13). The transmitter (12) is arranged for transmitting information (15) identifying said mutually corresponding signals and the receiver (14) is arranged for receiving said information (15). The receiver (14) comprises a selector (16) for selecting on basis of said information (15) at least one (17) of the mutually corresponding signals. In the way, the receiver (14) can automatically select the most appropriate signal (17), e.g.