Abstract: Various systems and methods for securely sharing private in formation are described herein. A mobile device comprises instruction to configured the mobile device to identify a verifier device having an available wireless connection, the wireless connection having a wireless connection strength; determine that a triggering event occurs, the triggering event based on the wireless connection strength; when the triggering event occurs: connect to the verifier device; transmit a digital credential to the verifier device, each of a plurality of data elements of the digital credential separately encrypted using distinct encryption keys; receive a request to access a requested data element of the digital credential; prompt a user of the mobile device for consent to share the requested data element; and transmit information to the verifier device when the user consents sharing the requested data element, the information used to decrypt only the requested data element.

Abstract: There is provided mechanisms for handling content delivery in a client node. A method being performed by the client node. The method comprises registering, by an application entity of the client node and with an MBMS entity of the client node, for enabling the client node to receive content delivered by encrypted unicast transmission and to receive the content delivered by broadcast transmission. The method comprises selectively controlling, by a trusted entity of the client node, reception of the content in a media player of the client node between reception of the encrypted unicast transmission and broadcast transmission depending on whether the content is available or not for reception on the broadcast transmission.

Abstract: This disclosure relates to a unified authentication method for a device to authenticate an operator provider network and a service provider network based on Identity-Based Cryptography where each of the device, operator provider network and service provider network has a different private key and a same Global Public Key (GPK) issued by a public key generator, the unified authentication method comprising: the device, generating and transmitting an authentication data package to the operator provider network, in response to receiving the authentication data package, determining a type of authentication based on the Authentication Type; the element of the operator provider network, in response to determining the first type of authentication, generating and transmitting a first Authentication Response Message to the device and transmitting the authentication data package to the element of the service provider network based on the SP_ID.

Abstract: A master or administrative device may be used to control and manage a particular media content lock on other devices within a particular network. When a new device is registered, the new device may be set-up to be configured so as to comply with the particular media content lock.

Abstract: Systems, methods, and devices for advertising fraud malicious software botnet detection. Systems, methods, and devices for advertising fraud infrastructure infiltration. Systems, methods, and devices for identifying non-organic traffic entities. Systems, methods, and devices for local instrumentation of advertising fraud malicious software.

Abstract: A method, computer system, and a computer program product for timing secured content is provided. The present invention may include receiving a connection request from a user device. The present invention may also include generating a pass-phrase and a key based on the received connection request. The present invention may then include encrypting a data packet based on the generated pass-phrase and the generated key. The present invention may further include sending the encrypted data packet to the user device. The present invention may also include receiving a pass-phrase request from the user device. The present invention may then include sending the generated pass-phrase in response to receiving the pass-phrase request. The present invention may further include receiving a message to start a timer associated with the sent data packet. The present invention may also include starting the timer based on the received message to start the timer.

Abstract: A monitoring system can monitor computing processes in clouds. The monitoring system can monitor the clouds for certain events associated with the computing processes. The monitoring system can receive, from the user, a particular event and an action to perform upon the occurrence of the event. Once received, the monitoring system can compare the information collected during monitoring against the event specified by the user. Once the event occurs, the monitoring system can perform the action associated with the event.

Abstract: Apparatus and methods for provisioning of customer premise equipment (CPE) equipped with a secure microprocessor to receive e.g., digital video content by entering unique identification of the CPE at one or more servers located at the headend or other location of a content-based network. In one embodiment, the CPE comprises a download-enabled (e.g., DCAS) host with embedded cable modem and embedded set-top box functionality, and the provisioning includes enabling DOCSIS functionality of the CPE, assigning an IP address to the CPE and providing the CPE with a client image for the conditional access system chosen by the network operator. In one variant, the network operator can deactivate a provisioned device while connected to the network, as well when disconnected from the network. The network operator can also add, delete or replace conditional access client image in a provisioned device.

Abstract: Systems and methods for authoring and performing procedural workflows, and engaging in multimedia communication, remote assistance, training, data entry, inventory management, authentication, and secure networking using a hands-free or substantially hands-free wearable digital device are described. In one implementation, a user logs into a secure network using existing credentials, and a Quick Response Code is generated to temporarily authorize the user's wearable device within the secure network. In another implementation, information is encrypted and transferred between a computing device and a remote system, and the computing device is verified as being connected to a particular network and located within a particular geofence. In a further implementation, an interface for authoring a procedural workflow includes defining workflow steps based on selected primitives, and displaying rendered previews of the workflow as it would appear on different user devices.

Abstract: A method and apparatus for streaming Over-the-Top (OTT) content on a network to subscribers is described. A digital video transport stream of an item of the OTT content is obtained via unicast streaming methods of a resolution and bit rate selected from an available set of different resolutions and bit rates for the digital video transport stream. The digital video transport stream of the selected resolution and bit rate is transmitted in the form of an IP multicast over the network to subscribers. Bandwidth utilization of the network is monitored so that switching of the bit rate to a different bit rate for the digital video transport stream can be controlled to provide adaptive rate control of the IP multicast.

Abstract: A system includes a kiosk that receives signals broadcast from a service provider and a wireless interface that receives, from a mobile device, a request for first content included in the signals received by the kiosk. The first content corresponds to a first channel. The kiosk includes a plurality of tuners. The kiosk tunes a first tuner of the plurality of tuners to the first channel and the first tuner outputs the first content. The kiosk provides the first content to the wireless interface. The wireless interface transmits the first content to the mobile device.

Abstract: A buffer model in an HTTP streaming client may include receiving a first content fragment of a first content stream in response to a first HTTP request. It may also include receiving a second content fragment of a second content stream in response to a second HTTP request. The buffer model may further include storing the first and second content fragments in first and second buffers of a plurality of configurable buffers. The first and second content fragments may be multiplexed into a third buffer of the plurality of buffers. The multiplexed first and second content fragments may be stored in a fourth buffer of the plurality of buffers for playback. The buffer model may be implemented by an application. The buffers may be designed based on one or more constraints.

Abstract: A method and system that provides customers a pay-per-view portal, accessible via a television service, a mobile service, or an Internet service. The pay-per-view portal permits customers to search for pay-per-view programs and provide search results that include related content to pay-per-view programs including related videos, articles, biographical summaries, stats on players or fighters, and images. The pay-per-view portal provides personalized pay-per-view program recommendations, pay-per-view calendars, and sub-portals directed to categories or sub-categories of pay-per-view programs. The pay-per-view portal also provides the ordering and purchasing of pay-per-view programs days, weeks, or months in advance of the airing of the pay-per-view programs.

Abstract: A method and apparatus for streaming Over-the-Top (OTT) content on a network to subscribers is described. A digital video transport stream of an item of the OTT content is obtained via unicast streaming methods of a resolution and bit rate selected from an available set of different resolutions and bit rates for the digital video transport stream. The digital video transport stream of the selected resolution and bit rate is transmitted in the form of an IP multicast over the network to subscribers. Bandwidth utilization of the network is monitored so that switching of the bit rate to a different bit rate for the digital video transport stream can be controlled to provide adaptive rate control of the IP multicast.

Abstract: A video processing system includes a video device that generates a request corresponding to video content. A conditional access module generates a video signal for transmission to the video device during a first time period, and terminates transmission of the video signal when the request is not authenticated during the first time period. In a further embodiment, the conditional access module generates a video signal for unscrambled transmission to the video device during a first time period, terminates the unscrambled transmission of the video signal at the expiration of the first time period, and continues with scrambled transmission of the video signal after the first time period.

Abstract: Method, device, and storage medium for providing a program service based on identifying a user at a user level versus at an account level or a device level. The user is identified based on an identifier associated with a mobile device. The program service allows the user to store program session information according to various user settings including location, time of day, user device used during previous session, type of program, and service provider that provides access to the program service. The program service allows the user to share program session information with other users or prevent other users from accessing the program session information. The program service provides digital rights management at the user level.

Abstract: Methods and systems are provided for authenticating a human user. A memory can store a plurality of images and can store account information for a plurality of users. The account information can include personal image information for at least some of the users. A processor can receive a communication including an indication of a desire of a user to be authenticated, access an account of the user, modify the plurality of images to form a plurality of modified images, provide the plurality of modified images to the user, receive trial personal image information from the user, and compare the personal image information stored in the memory to the trial personal image information received from the user. The processor can authenticate the user if the personal image information stored in the memory is the same as the trial personal image information.

Abstract: A storage battery comprises a data storage device that allows for storing and retrieving data that may be useful during the life of the battery. The device may include a radiofrequency tag applied to the surface of the battery. Data stored in the device may be accessed by various devices, such as battery analyzers that perform remaining life other analyses. Some or all of the data may be encrypted to require that approved or licensed devices only access and use the data. Some data may be encrypted in one manner, requiring a first key, and other data in a different manner, requiring a different key. The different data sets may have different purposes, such as for battery analysis (using no encryption or requiring the first key), and for warranty, manufacturing, retail tracking and other purposes (using the second key).

Abstract: A multi-wavelength CATV transmission system includes transmitters adapted to emit carrier wavelengths on a 12.5 GHz+/?20% ITU grid with a minimum spacing between carriers and/or carriers and their beat product groups of 37.5 GHz+/?20%.

Abstract: Methods and systems for providing content. A selection of a single virtual channel may be received from the user. Virtual programming data for the single virtual channel may be accessed. The virtual programming data may define content to be provided over the single virtual channel. The content may be provided over the single virtual channel in accordance with the virtual programming data.

Abstract: A system for generating random key stream cipher texts passes an unencrypted random key stream through an AES engine to produce encrypted cipher text having a first block size in a first frequency domain; converts the encrypted cipher text in the first frequency domain to encrypted cipher text in a second frequency domain; and converts the encrypted cipher text having the first block size in the second frequency domain into smaller block sizes. The frequency in the first frequency domain is preferably lower than the frequency in the second frequency domain. The converting of the encrypted cipher text in the first frequency domain to encrypted cipher text in a second frequency domain may be effected by a dual clock domain FIFO.

Abstract: There is provided a reception device including a content reception unit configured to receive content, a digital watermark information acquisition unit configured to acquire information specifying an outflow route for the content to create a digital watermark, and a content output unit configured to embed a digital watermark in the received content by using the acquired information and configured to output the content.

Abstract: Embodiments of the invention are generally directed to identification and handling of data streams using coded preambles. An embodiment of an apparatus includes an interface with a communication channel, transmitter coupled with the interface to transmit one or more data streams via the interface, and a processing element, the processing element to receive one or more data streams for transmission. Upon receiving multiple data streams for transmission of a first type of data, including a first data stream and a second data stream for transmission of the first type of data, the processing element is to select a first preamble for the first data stream and a second preamble for the second data stream, where the first preamble is distinguishable from the second preamble.

Abstract: Systems and methods for implementing a Transport I/O system are described. Network encrypted content may be received by a device. The device may provide the network encrypted content to a secure processor, such as, for example, a smart card. The secure processor obtains a network control word that may be used to decrypt the network encrypted content. The secure processor may decrypt the network encrypted content to produce clear content. In embodiments, the secure processor may then use a local control word to generate locally encrypted content specific to the device. The device may then receive the locally encrypted content from the secure processor and proceed to decrypt the locally encrypted content using a shared local encryption key. The Transport I/O system ensures the protection of the network control word by maintaining the network control word on the secure processor.

Abstract: Systems and methods for implementing a Transport I/O system are described. Network encrypted content may be received by a device. The device may provide the network encrypted content to a secure processor, such as, for example, a smart card. The secure processor obtains a network control word that may be used to decrypt the network encrypted content. The secure processor may decrypt the network encrypted content to produce clear content, in embodiments, the secure processor may then use a local control word to generate locally encrypted content specific to the device. The device may then receive the locally encrypted content from the secure processor and proceed to decrypt the locally encrypted content using a shared local encryption key. The Transport I/O system ensures the protection of the network control word by maintaining the network control word on the secure processor.

Abstract: A server receives a video content identifier and a video player identifier from a video player through a network. The video content identifier identifies video content. The video player identifier identifies a video player. Further, the video player identifier is provided to a hash generator to generate a hash of the video player. In addition, the plaintext of the video content is encrypted with the encryption key to generate ciphertext. The encryption key is encrypted with the hash to generate an encrypted encryption key.

Abstract: Various arrangements for encrypting multiple television channels are presented. A first television channel of a plurality of television channels to be protected via a first entitlement control message (ECM) using a first encryption scheme may be designated. The plurality of television channels may be transmitted using a single transponder stream. A second television channel of the plurality of television channels to be protected via a second ECM encrypted using a second encryption scheme while the first television channel of the plurality of television channels is protected using the first encryption scheme may be designated. The first and second ECMs may be transmitted to a plurality of television receivers. Data from the first ECM may be used for descrambling of the first television channel by the plurality of television receivers. Data from the second ECM may be used for descrambling of the second television channel by the plurality of television receivers.

Abstract: A method for delivering encrypted content to a subscriber terminal on-demand through a communication network is provided. The method begins when SRM receives a request for content from the subscriber terminal. In response to the request, the SRM directs a video server to transmit the content as an unencrypted transport stream to an encryptor. The packets in the unencrypted transport stream include a header with a destination address associated with the subscriber terminal. The encryptor encrypts the content in the unencrypted transport stream to generate an encrypted transport stream. The encryptor also inserts in the packet headers of the packets in the encrypted transport stream the destination address associated with the subscriber terminal obtained from the packet headers in the unencrypted transport stream. Finally, the encrypted transport stream is transmitted to the subscriber terminal over the communication network.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: Authentication method of at least one application using resources stored in a security module associated to an equipment connected to a control server via a network. The control server receives via the network, analyses and verifies identification data comprising at least an identifier of the equipment and an identifier of the security module, generates a cryptogram comprising a digest of the application, the identification data and instructions intended for the security module and transmits the cryptogram, via the network and the equipment, to the security module. The latter verifies the application by comparing the digest extracted from the cryptogram with a calculated digest, wherein, during at least one of initialization and activation of the application, the security module executes the instructions extracted from the cryptogram and either releases or blocks access to certain resources of said security module according to a result of the verification of the application.

Abstract: The invention relates to a value-added service applied to the broadcasting of video programs or content and more particularly to mobile television (Mobile TV). The invention promotes service continuity during the broadcasting of programs having an undefined duration and the broadcasting of which has been subject to a Pay-Per-View type purchase.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: Systems and methods, including computer software adapted to perform certain operations, can be implemented for providing remotely defined security data to an application extension on a client device. A sequence of instructions and at least one permission indicator associated with the sequence of instructions are received. A first permission indicator is associated with a code extension to a software application adapted to execute at least a portion of the sequence of instructions. The code extension is adapted to perform one or more operations that supplement the operations supported by the software application. An instruction within the sequence of instructions associated with adapted for execution by the code extension and with an activity is identified. The first permission indicator is provided to the code extension. The code extension determines whether performance of the activity is permitted based, at least in part, on the first permission indicator.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: Systems and/or methods that facilitate descrambling of data communicated between a memory and a host processor are presented. A descrambler component determines the bit order of data signals from a memory device based on pattern information provided to the descrambler component by the memory device during initialization. The descrambler component can receive one or more distinct patterns and can evaluate the data values associated with such patterns for each data line of the memory. The descrambler component can determine the bit order of the data signals based on such patterns and can generate a transformation function that can facilitate rearranging data, which can be received from or sent to the memory device, into a predetermined bit order.

Abstract: Quality of Service (QoS) and/or bandwidth allocation can be provided for interactive gaming via a Regional/Access Network (RAN). The RAN can provide end-to-end transport between a Gaming Application Service Provider (GASP) and a Customer Premises Network (CPN) that includes a Routing Gateway (RG). Quality of Service (QoS) and/or bandwidth allocation can be provided by determining different levels of subscription service for different subscribers to an interactive game between a plurality of participants. Different QoS and/or bandwidth allocations can be provided to different gaming traffic flows associated with the different subscribers to the interactive game based on the different levels of subscription service of the different subscribers.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: A digital TV conditional access system having an authentication module, a conditional access front-end module, and a receiver module. The authentication module communicates bidirectionally with and authenticates the receiver module to generate a unique ID number and authentication information, the ID number and the authentication information being recorded to a data base. The conditional access front-end module communicates bidirectionally with the data base, collects information of the receiver module from the data base, encrypts entitlement management message of the receiver module, and transmits the encrypted entitlement management message to the receiver module by an addressing mode. The conditional access front-end module further includes an entitlement control message generator, and the receiver module receives a scrambled program with the help of the ID number and the authentication information.

Abstract: The invention defines a method for leveraging the standard conditional access module interface of a digital TV receiver to deliver IPTV or other TV content without the need of a set top box. An IP-connected interface (“probe”) is used in place of a conditional access module to establish a two-way communication link between the TV and the IPTV headend or other IP content source and to deliver IP content. In an embodiment, the invention covers the specifics of content navigation without requiring any modification of the TV receiver application software or provisioning of IPTV-specific software. Content navigation is achieved by supporting a catalog/grid browsing session on the TV receiver and enabling a flat multiplex navigation, a virtual MPEG multiplex that contains the definition of several available programs but a single video and audio channel is dynamically switched to carry the selected program.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: A television event may be consumed after been stored in a mass memory of a multimedia unit, but still fully relies on the security of a secure device. A conversion of a received content aims at firstly descrambling the content using control words included in entitlement control messages and immediately re-encrypting the descrambled content by a unique key generated specifically for this content. Access conditions attached to the entitlement control message containing the control word are temporarily stored and once the decryption is terminated, the secure device produces an information block. This information block containing for example access conditions and an identifier of the content is either stored into a secure memory of the secure device or stored in the mass memory with the encrypted content. The unique key is made up of a combination of a root key specific to the secure device and the information block.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: A method and system for ordering content includes a mobile device having an ordering interactive interface having available content including linear content and on-demand content. The interactive interface receives a content selection corresponding to the on-demand content from the interactive interface and communicates the selection to a content processing system. The content processing system communicates a control word to the user device. A user device receives the on-demand content corresponding to the selection in response to the control word.

Abstract: The present invention makes use of techniques such as those described by Boneh and Franklin to allow for the realization of a pseudo-asymmetric encryption scheme whereby one public encryption corresponds to a plurality of private decryption keys. This scheme therefore provides a solution to the problem of inefficient use of bandwidth in asymmetrical encryption schemes which inherently require that a plurality of encryptions of data be broadcast to a plurality of receivers. The invention further ensures that the advantage of traceability, typical found in asymmetric encryption schemes, is maintained due to the characteristic that each receiver uses a unique traceable decryption key. The traceability thus achieved by the present invention allows for the revocation of a security module which has been involved in the abusive use of conditional access data, particularly by means of clones of security modules whose security has been compromised.

Abstract: The present invention proposes a solution to prevent a program flow in a processing unit from being modified with respect to an intended program flow, thereby ensuring that important steps such as verifying or authenticating are not bypassed. The invention is particularly aimed at security modules within receiver/decoders in a pay-TV system and involves performing a set of predetermined operations during the processing of entitlement management messages and/or entitlement control messages, said operations being redundant with respect to the normal processing of said messages while leading to the calculation of keys which can then be used to verify that the intended program flow has been respected.

Abstract: An apparatus and method associated with an Internet Protocol Television (IPTV) service in a mobile environment are provided. A streaming server may provide a mobile terminal with a mobile certificate and an encryption key. In response to a content request received from the mobile terminal, the streaming server may provide the mobile terminal with encrypted content and a Downloadable Conditional Access System (DCAS) code. The mobile terminal may decrypt the encrypted content using the encryption key and the DCAS code, and may play back the decrypted content.

Abstract: Advertising is marked with a code in a way which makes it difficult to fool the system. The advertising is marked with a code at the time the advertising is produced. Then, when the advertising is broadcast, the code on the advertising is analyzed. Different security measures can be used, including producing the code in the closed captioning so that many different people can see the code, or comparing codes in one part of the signal with a code in another part of the signal. Measures are taken to prevent the code from being used to detect commercials. According to another part of this system, a paradigm for a clearinghouse is disclosed in which the user signs up with the clearinghouse, obtains a line of credit, and the advertiser, the agency, and the ad producer also subscribe to the service. When the ad is actually aired, the payment can be automatically transferred.