Abstract: A method of verification of rights is disclosed, contained in a security module associated to an apparatus processing broadcasted digital data. The apparatus is connected to a management center transmitting encrypted rights messages for accessing the digital data. The method includes reception and reading by the security module of all or part of a rights message including at least one right and means for verifying the right, decryption and verification of the rights message and updating of a rights memory, and storage of all or part of the rights message in a messages memory. During a further verification step, the method includes identification of at least one right present in the rights memory, search of the corresponding stored rights message and verification of the rights message, comparison of the right contained in the rights message with the corresponding right stored in the rights memory, and determination of a default state when the result of the comparison indicates a difference.

Abstract: In on aspect, user data is decoded which has been coded as base data and refining data, wherein the base data is decoded using a first delay and the refining data is decoded using a second delay which is longer than the first delay. Furthermore, a check establishes whether the refining data is available in accordance with a time parameter. If the check result is positive, the decoded base data is additionally delayed, the additionally delayed decoded base data is mixed with the decoded refining data, and resulting mixed data is output as user data. If the check result is negative, however, the decoded base data is output as user data.

Abstract: In a method of descrambling a scrambled content data object, at least a section of the scrambled content data object is descrambled by applying at least one decryption operation under a key at least partly derivable from a content descrambling key. At least one content descrambling key is obtained from a message received from a conditional access sub-system over a data communication channel. At least one cryptogram of data obtainable from at least one content descrambling key in the message, each of which cryptograms are carried in the message, is decrypted under an associated channel key. A first key is used to establish each channel key. At least the section of the scrambled content data object is descrambled by applying a further decryption operation under a key at least partly derivable from the first key.

Abstract: A video processing system includes a video encoder that encodes a video signal into a contiguous video stream having an independent portion and a dependent portion that requires the independent portion for decoding. A scrambling module scrambles the contiguous video stream to produce a scrambled video stream by scrambling the independent video portion and leaving the dependent portion unscrambled.

Abstract: Technologies to transfer responsibility and control over security from player makers to content authors by enabling integration of security logic and content. An exemplary optical disk (200) carries an encrypted digital video title combined with data processing operations that implement the title's security policies and decryption processes. Player devices include a processing environment (e.g., a real-time virtual machine), which plays content by interpreting its processing operations. Players also provide procedure calls to enable content code to load data from media, perform network communications, determine playback environment configurations (225), access secure non-volatile storage, submit data to CODECs for output (250), and/or perform cryptographic operations. Content can insert forensic watermarks in decoded output for tracing pirate copies.

Abstract: The invention concerns a method for controlling access to encrypted data (CT) by control words (CW), said control words being received by a security module in control messages (ECM) and returned to a unit operating on the encrypted data. Said control messages (ECM) contain at least one first control word (CW1) and a second control word (CW2), said control words each allowing access to the encrypted data (CT) during a predetermined period called cryptoperiod (CP). Said method includes the following steps: sending said encrypted data to at least one operating unit; and sending control messages (ECM) to said control unit, such a control message (ECM) containing at least two specific control words (CW1, CW2) being sent to the operating unit after sending the data encrypted by said first control word (CW1) and before sending the data encrypted by said second control word (CW2).

Abstract: There is described a decryption processing apparatus and an image forming apparatus, which make it possible to prevent the encrypted data from being incorrectly decrypted by employing a wrong decryption key. The decryption processing apparatus for decrypting encrypted digital data including encrypted code and encrypted data, includes: a first decryption section to generate decrypted diagnosis code by decrypting the encrypted code; a second decryption section to decrypt the encrypted data; a determination section to determine based on the diagnosis code whether a decryption process of the encrypted code is normally executed; and a control section to allow starting decryption process of the encrypted data by the second decryption section when the decryption process of the encrypted code is normal, and to prohibit starting the decryption process of the encrypted data by the second decryption section when the decryption process of the encrypted code is abnormal.

Abstract: A method allows Internet Protocol version 6 (IPv6) nodes that use Mobile IPv6 for mobility management, or DHCP for address provisioning, to securely claim and defend their network addresses themselves or through proxies using the SEND protocol. The network node may also sign and verify a message that claims and defends a network address. The network address to be claimed and defended may be either autoconfigured or obtained from a server using the DHCPv6 protocol. If the MCGA is generated by a mobile IPv6 node as a mobile IPv6 home address, the MCGA can be securely proxied by the mobile IPv6 home agent after the mobile node has left the home link. However, if the MCGA is generated as a mobile IPv6 care-of address by a mobile IPv6 node while on a foreign subnet, the MCGA can be securely proxied by the current or new access router, before the mobile node arrives on the link and after it has left the link, respectively.

Abstract: A content receiving apparatus, capable of resuming transmission of a content without assigning a new key even when transmission of the content is suspended, is provided. A content receiving apparatus is an apparatus which receives contents. The content receiving apparatus includes: a key exchange unit which exchanges, with a content transmitting apparatus for transmitting a content, a key which is to be used in encrypting a content and which is valid only for a prescribed period; a reception unit which receives the content encrypted by using the key; a detection unit which detects when a time during which the key is not used reaches a prescribed time; and a transmission unit which transmits, to the content transmitting apparatus, information for not making the key invalid, when it is detected that the time during which the key is not is used has reached the prescribed time.

Abstract: An apparatus for descrambling a data retrieved from an optical storage medium comprises a decoder, a memory and a descramble engine. The decoder decodes the data and generates address information corresponding to an address on the optical storage medium, wherein the address responding to a part of the data having been decoded. The memory stores the address information and the part of the data. The descramble engine continuously descrambles the part of the data by retrieving the address information. A method for descrambling a data retrieved from an optical storage medium comprises the following steps: decoding the data; generating address information corresponding to an address on the optical storage medium; storing the address information and a part of the data having been corrected; and descrambling the part of the data continuously by retrieving the address information after the data decoding is interrupted.

Abstract: In a communication system, second encryption information is generated using first encryption information when data to be transmitted is generated. The data is encrypted using the second encryption information and third encryption information. A signal including the encrypted data and the first encryption information is generated and transmitted.

Abstract: In a subscriber television system with a host terminal, the present invention allows the identification of the individual packets from two separate MPEG transport streams that have been multiplexed together for decoding by a single external conditional access or point-of-deployment (POD) module. The decoding of individual packets from two separate MPEG transport streams supports the use of multiple tuner host terminals for such functions as picture-in-picture (PIP) program viewing and the viewing of one program while recording a second program.

Abstract: A method for transmission and storing of scrambled content in which the scrambled content is transmitted together with encrypted control words, the control words being used for descrambling the scrambled content, transmitting to a receiver/decoder the scrambled content and encrypted control words, said control words being encrypted by an exploitation key (KG), decrypting said encrypted control words in a removable security module with an exploitation key (KG), said removable security module being received by the receiver/decoder, characterised in that it further includes transmitting usage rules message (URM) to the receiver/decoder (2000), which usage rules (URM) impose usage constraints on the playback of the content stored on a mass storage device encrypting the decrypted encrypted control words and usage rules messages by a local key (KL) to produce encrypted control management messages (CMM) storing said scrambled content and encrypted control management message on the mass storage device of the receiver

Abstract: A data processing device of the invention has an ID creator unit (300) which adds ID information which is set by a CPU and the number of sectors, and outputs a result of the addition as ID information; a scramble SEED value table (103) which produces an initial scramble SEED value, by using the ID information which is outputted from the ID creator unit (300); a normal scramble filter (104) which produces a scramble SEED value (402) for data to be transferred; a frame jumping scramble filter (301) which holds a scramble SEED value of a jumping destination (401) in preparation for jumping; and a selector (105) which selects one of the scramble SEED value (401) and the scramble SEED value (402) and outputs the selected value to the normal scramble filter (104). Accordingly, the data processing device can perform a scrambling process and a de-scrambling process, without depending on the reliability of the data being transferred.

Abstract: In a particular embodiment a method is disclosed for inserting data objects into a video stream. The method encrypts a first portion of the video stream at a server, suspends encryption of a second portion of the video stream, and sends the first and second portions of the video stream to a client device for insertion of the object into the video stream. In another embodiment a system is disclosed for inserting data objects into a video stream. The system encrypts a first portion of the video stream at a server, suspends encryption of a second portion of the video stream, and sends the first and second portions of the video stream to a client device for insertion of the object into the video stream.

Abstract: A method of guaranteeing the integrity of at least one computer software program transmitted by a transmitter to a decoder which is equipped with an encryption/decryption module via a long-distance information transmission network. The inventive method includes inserting (at 52) a supplementary piece of information into a message containing the information necessary for the decoder to decrypt the information signals transmitted by the transmitter, the supplementary information enabling the encryption/decryption module to verify that it has effectively received each computer software program transmitted.

Abstract: A method and apparatus for securing and, optionally, distributing an information stream by divided the information stream into a collection of segments and compressing the segments, rearranging the order of the segments and encrypting the segments.

Abstract: Systems and methods for a wireless communication system used for transmitting and receiving information, the information not containing identification of the information's intended recipient. A method for transmitting payload information, the method comprising providing verification information scrambling a portion of the verification information and transmitting the payload information with the scrambled verification information portion. Also provided is a method for processing transmitted payload information incorporated into an encoded information message with scrambled verification information, the method comprising receiving the encoded information message descrambling at least a portion of the scrambled verification information and comparing said descrambled verification information with predetermined verification information processing said payload information based on said comparison.

Abstract: A decoder may perform node data reordering for bit node processing and node data reordering for bit node to check node interconnections. The decoder may also utilize a single barrel shifting operation on data read from an edge memory for bit node processing or check node processing during a memory read operation. The decoder may also utilize a single format conversion on data read from an edge memory for bit node processing or check node processing. The decoder may also utilize a simplified check node process for check node processing.

Abstract: A wireless home entertainment system consistent with certain embodiments has at least one server having at least one manipulable authentication element thereon, wherein the manipulable authentication element is not a general purpose data entry element. At least one component is in wireless communication with the server. A User Interface is used for selecting an authenticated component to be de-authenticated. A person can cause the server to regard an authenticated component as being de-authenticated by manipulating the authentication element while a component to be de-authenticated is selected using the user interface. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: Windowed backward key rotation. A user is provided information that allows determining a limited number of previous keys in a series of keys from a later key in the series. A key in the series is generated, based at least in part on the information provided to the user. The key in the series is provided to the user. The user determines at least one key in the limited number of previous keys in the series by applying the information to the key in the series.

Abstract: Example embodiments relate to a method for granting customers access to a product or a set of products. The method may include providing by the customer through a secured communication network, a code to a registration center, wherein the code being unique, transmitting the code from the registration center to an authorization center, retrieving the identifier of the product or the set products from the code, by requesting a data base or calculating the identifier, and transmitting, by the authorization center, an authorization code to the customer terminal, wherein the authorization code allows access to the product or the set of products.

Abstract: A system and method is provided for evaluating the effectiveness of data encryption for hiding the identity of the source of Web traffic. A signature is constructed from encrypted Web traffic for a Web page sent by a target Web site, and the signature is compared with archived traffic signatures obtained by accessing various Web pages of interest in advance. If the signature of the detected encrypted Web traffic matches a stored traffic signature beyond a pre-set statistical threshold, a positive match is found, and the source of the traffic is identified. Countermeasures for reducing the reliability of source identification based on traffic signature matching are provided.

Abstract: A method, apparatus, and article of manufacture provide the ability to process digital media content. A secret key (Ka) is obtained and encrypted into an authorization key message (AKM) message. One or more entitlement keys (Ke) are then obtained and encrypted using the secret key (Ka) as an encryption key into an entitlement management message (EMM). One or more media content encryption keys (Kc) are obtained and encrypted using one or more of the entitlement keys (Ke) as encryption keys into an entitlement control message (ECM). Digital media data content (Dc) is then obtained and encrypted using the one or more media content encryption keys (Kc). The AKM, EMM, ECM, and encrypted digital media data content are then delivered to a set-top box that is configured to provide digital media services with the content.

Abstract: A host receiver and a client receiver are operatively in a direct broadcast satellite system. Program materials received by the host receiver from the direct broadcast satellite system are decrypted by the host receiver. The decrypted program materials are then encrypted at the host receiver using a copy protection key. The copy protection key is encrypted at the host receiver using a host-client pairing key shared between the host receiver and client receiver. The encrypted program materials and the encrypted copy protection key are transferred from the host receiver to the client receiver. The transferred copy protection key is decrypted at the client receiver using the host-client pairing key. The transferred program materials are then decrypted at the client receiver using the decrypted copy protection key.

Abstract: Systems and methods include broadcasting an entitlement management message (EMM) in a communication system using a scheduled delivery window. The systems and methods including receiving a EMM broadcast window from a distribution system, listening for the EMM during the EMM broadcast window, and receiving the EMM from the distribution system during the EMM broadcast window.

Abstract: A video processing system includes a video encoder that encodes a video signal into a contiguous video stream having an independent portion and a dependent portion that requires the independent portion for decoding. A scrambling module scrambles the contiguous video stream to produce a scrambled video stream by scrambling the independent video portion and leaving the dependent portion unscrambled.

Abstract: Program materials received from a direct broadcast satellite system are distributed between a host receiver and a client receiver for remote decryption. Using either a same pairing key or different host and client pairing keys, an encrypted media encryption key is received at both the host and client receivers, and the encrypted media encryption key is decrypted at both the host and client receivers using the pairing key. Encrypted program materials are received from the broadcast system at the host receiver, and the encrypted program materials are decrypted at the host receiver using the media encryption key. The encrypted program materials are also transferred from the host receiver to the client receiver, where the encrypted program materials are decrypted at the client receiver using the media encryption key.

Abstract: A data dependent scrambler for a communications channel that receives a user data sequence including N symbols each with M bits includes a seed finder that selects a scrambling seed and a first scrambler that receives said user data sequence and said scrambling seed from said seed finder. The first scrambler generates a scrambled user data sequence. A first encoder identifies a string of X consecutive zeros in adjacent symbols of the scrambled used data sequence and replaces one of the adjacent symbols with an all-one symbol. The first encoder replaces the other of the adjacent symbols with first bits representing a position of the string of X consecutive zeros and second bits representing bits of the adjacent symbols that are not in the string of X consecutive zeros.

Abstract: A media player manages and controls rights to playback of media content by the media player, which stores, during a registration process in which the media player need not be connected to an external computing system, information used by the media player to control playback. A minimal amount of the media player's memory is used to store the information used to control playback.

Abstract: A method and apparatus for securing and, optionally, distributing an information stream by divided the information stream into a collection of segments and compressing the segments, rearranging the order of the segments and encrypting the segments.

Abstract: Methods, systems, and products are disclosed for specifying a signature for an encrypted packet stream. One method receives the encrypted stream of packets, and encryption obscures the contents of a packet. A signature for insertion into the stream of packets is specified, and the signature identifies a type of data encrypted within the stream of packets. The signature identifies the contents of the packet despite the encryption obscuring the contents.

Abstract: For enabling a counter-program recording when viewing a program, with only one (1) system of POD, a digital broadcast receiving apparatus, for receiving information being scrambled or coded, comprises a display unit for displaying the information being scrambled or coded thereon, a recording unit for recording the information being scrambled or coded, therein; and a controller unit for setting up timing for releasing the information recorded in the recording unit from scrambling or coding thereof, thereby achieving recording of the counter-program, by recording the contents while being descrambled, when recoding the counter-program during when viewing the program, and turning back the stream into POD when a user does not use the receiving apparatus or upon an operation of the user, so as to re-record that descrambled therein.

Abstract: A transmission apparatus updates the encryption method in the event the encryption method is broken. The tool ID of a decryption tool for encrypted data is acquired, the presence of the tool is confirmed and the tool is then acquired and updated, and encrypted data is processed and transmitted based on rights information associated with the encrypted data.

Abstract: A system and a method for secure transmission of protected content to a subscriber, without requiring a smart card or other renewable security element to be in physical proximity of the recipient module of the subscriber, such as a set-top box for example. Therefore, the renewable security element may optionally be protected and controlled by the transmitter of the protected content, such as by the broadcaster for example.

Abstract: Software is securely distributed with limited usage rights. The software may be an executable program and/or one or more data files such as image or multimedia data files. The software includes an access control object which prevents at least some usage of the software without the use of a first access control code. The first access control code is produced based on selected information characteristic of the user's computer system. The access control code is produced in a server computer to which the user directs a request for the access control code. The user makes a payment to receive the access control code, which is then downloaded to the user's computer system.

Abstract: According to certain embodiments consistent with the present invention, a method of processing digital video content, wherein the digital video content comprises intra-coded frames and inter-coded frames, involves selecting a plurality of the intra-coded frames for encryption to produce selected frames; encrypting the selected frames under a first encryption algorithm to produce first encrypted frames; storing the inter-coded frames in a first file; and storing the intra-coded frames, whether encrypted under the first encryption algorithm or unencrypted, in a second file. For a multiple encryption embodiment consistent with the present invention, the method further involves duplicating the intra-coded frames; encrypting duplicates of the selected frames under a second encryption algorithm to produce second encrypted frames; storing the intra-coded frames, whether encrypted under the second encryption algorithm or unencrypted, in a third file.

Abstract: An apparatus for generating an encrypted data stream representing an audio and/or video signal comprises an encoder for encoding an input signal to generate a data stream with a predefined data stream syntax as output signal. The apparatus further comprises an encryption means coupled with the decoder in order to influence encoder internal data and/or the output signal of the encoder in a uniquely reversible manner based on a key such that the generated encrypted data stream comprises payload information differing from payload information of a data stream that would be generated by the apparatus without the presence of an encryption means and that the generated encrypted data stream comprises the predefined data stream syntax.

Abstract: A system and method for providing conditional access authorizations in a satellite-receiving system includes generating a conditional access signal at a head-end 20, receiving the conditional access signal at a fixed satellite receiver 54. The conditional access signal is communicated from the fixed satellite receiver 54 to a mobile satellite receiver 28. Conditional access is stored in the mobile satellite receiver 28 and enables the use of the signals by the mobile satellite receiver in response to the conditional access signal.

Abstract: In a subscriber television system with a host terminal, the present invention allows the identification of the individual packets from two separate MPEG transport streams that have been multiplexed together for decoding by a single external conditional access or point-of-deployment (POD) module. The decoding of individual packets from two separate MPEG transport streams supports the use of multiple tuner host terminals for such functions as picture-in-picture (PIP) program viewing and the viewing of one program while recording a second program.

Abstract: A method for forwarding messages containing cryptographic keys from a conditional access system that controls a population of set-top boxes to an encryption renewal system. The method includes storing a fictitious address of a virtual set-top box; generating a message based on the fictitious address, the message containing a cryptographic key; and forwarding the message to the fictitious address of the virtual set-top box. The encryption renewal system has information regarding the virtual set-top box, and is the recipient of the message. In addition, the encryption renewal system is for controlling access to pre-encrypted content generated by an encryption device.

Abstract: A system provides improved security in a streaming media decoder includes decryption of encoded media information at the media layer, within a decoder component of a playback device. A content source, such as an MPEG-4 media stream from a network, or a file on a local storage device, etc. that contain packetized content, and supplies encrypted and encoded media information. For example, digital sound and image information can be conveyed for presentation. A reassembler component is used to initiate decryption of a nominal amount of information needed to perform further processing at the QuickTime player. Encrypted access units are sent from the reassembler to the decoder, where the decoder causes decryption of the access unit information. This approach prevents decrypted, encoded information from being transferred from the reassembler to the decoder. Such decrypted and encoded information is especially susceptible to copying.

Abstract: A partial dual encryption encoder, consistent with certain embodiments of the present invention receives video from a source of an unencrypted digital video signal. A first segment of the unencrypted digital video signal is selected for transmission over a first channel. A first encrypter encrypts a second segment of the unencrypted digital video signal under a first encryption method to produce a first encrypted segment and a second encrypter that encrypts the second segment of the unencrypted digital video signal under a second encryption to produce a second encrypted segment. A multiplexer combines the unencrypted digital video signal with the first and second encrypted segments for transmission, so that the first segment is transmitted over a first channel, the first encrypted segment is transmitted over the first channel and the second encrypted segment is transmitted over a second channel.

Abstract: A decoder device has a control unit for decoding encoded TV programs. The decoder device has an input for entering an encoded TV program, a decryption device for decoding an encoded TV program into a format which can be played on a television set, an output which can be connected to the television set and is designed to enter the encoded TV program into the television set for play, an interface for an identification or key component, to be used for validation of the decoding device, as well as an interface for a control unit. The interface for the identification or key component is located in the control unit.

Abstract: A record medium comprises an original data obtained by superimposing a presentation target data, to which an error correction encoding is performed and an identification information.

Abstract: A data transmitting/receiving method for charging the reception of pay data in units of a reception or in units of a group to which receivers belong with a high degree of freedom and its receiver. The transmission side allocates the same group identification number (IRD_Gr_ID) to receivers which receive data from the transmission side under a reception contract, have different individual identification numbers (IRD_ID), and belong to the same group, and manages the reception contract by means of the individual identification number (IRD_ID) and the group identification number (IRD_Gr_ID).

Abstract: A method for addressing terminals for receiving television programs subject to charge includes dividing the terminals into respective groups, each group having a respective group address. A respective identifier is assigned to each of the terminals of a group, each identifier being a respective binary vector. A data word and the respective group address of a first group is sent so as to address predetermined terminals of the first group. The data word is generated by logically combining the respective binary vectors of the terminals of the first group with a further binary vector, the further binary vector indicating the predetermined terminals.

Abstract: A method and apparatus for controlling integrated receiver operation in a communications terminal includes using an electronic device having a broadcast receiving module and a two-way communications module. The device may use the configuration of the receiving module to form a message to be sent to a peer device. The electronic device can use an incoming message to change a configuration of the receiving module. The incoming message may be sent from a notification node that is remotely configurable by a user. The receiving module can be controlled from an application program on the electronic device. In one aspect, the receiving module can be controlled from a Java™2 Micro Edition MIDlet.

Abstract: A data receiving method and unit extracts required data from among received digital signal data, and uses a predetermined decoding key to decode the extracted data. In the method and unit, it is determined whether the decoded data is normal. If it is determined that decoding has not been normally performed, corresponding data is deleted.

Abstract: A video data communication system and method are disclosed which provides for the secure transmission of video data among devices connected to a video data bus. The video data is transmitted with address information corresponding to a particular device or, alternatively, video data is encrypted and transmitted on the data bus without address information.