Abstract: An apparatus in a digital network receives at least one input transport stream having a plurality of PID streams and outputs at least one transport streams. The apparatus demultiplexes the at least one input transport streams and determines whether to: decrypt packets included in the at least one input transport stream; statistically multiplex a group of PID streams included in the at least one input transport stream; and encrypt packets included in the at least one input transport stream.

Abstract: A content data distribution system uses a single key and multiple program authorization to transmit a plurality of programs in multiplexed data packets such as those used in Digital Video Broadcasting. A receiver has a memory, a descrambler and a processor. Authorization indicators are transmitted among said data packets and stored in the memory. The authorization indicators identify a plurality of authorized data packets corresponding to at least one authorized program and further identifies a plurality of unauthorized data packets corresponding to at least one unauthorized program. Only authorized data packets are output from a receiver in decrypted form. Null sets are substituted for unauthorized data packets. Data packet tables may be rebuilt as necessary to replace tables lost in null set substitution. One key is used to encrypt all programs. Alternatively, a number of keys fewer than the number of authorized programs may be used for encryption. The keys may themselves be encrypted for transmission.

Abstract: In a step S1, when the user executes a tuning operation (a service-number input operation) on an input section, the information is output to a control section. In a step S3, the control section determines whether the service number selected in the step S1 corresponds to a promotion channel. When it is determined that the service number corresponds to a promotion channel, the procedure proceeds to a step S11. In the step S11, the control section displays on the monitor a message indicating that the selected service number is not found.

Abstract: An apparatus for adding a watermark to a moving image as it is displayed comprises a watermark generator in which data representing a watermark is generated. The watermark contains at least one of location data and time data pertaining to the displaying of the moving image. The location and time data is protected by forward error encoding. The watermark also contains at least one of program data identifying the moving image and frame data unique in identifying each frame of the moving image. The program and time data is protected by scrambling. A watermark applicator applies the watermark data to image data representing substantially all of the moving image depending on a characteristic, such as amplitude, of the data.

Abstract: Apparatus and methods for including a code having at least one code frequency component in an audio signal are provided. The abilities of various frequency components in the audio signal to mask the code frequency component to human hearing are evaluated and based on these evaluations an amplitude is assigned to the code frequency component. Methods and apparatus for detecting a code in an encoded audio signal are also provided. A code frequency component in the encoded audio signal is detected based on an expected code amplitude or on a noise amplitude within a range of audio frequencies including the frequency of the code component.

Abstract: An algorithm (such as the MD5 hash function) is applied to a file to produce an intrinsic unique identifier (IUI) for the file (or message digest). The file is encrypted using its IUI as the key for the encryption algorithm. An algorithm is then applied to the encrypted file to produce an IUI for the encrypted file. The encrypted file is safely stored or transferred within a network and is uniquely identifiable by its IUI. The encrypted file is decrypted using the IUI of the plaintext file as the key. The IUI serves as both a key to decrypt the file and also as verification that the integrity of the plaintext file has not been compromised. IUIs for any number of such encrypted files may be assembled into a descriptor file that includes meta data for each file, the IUI of the plaintext file and the IUI of the encrypted file. An algorithm is applied to the descriptor file to produce an IUI for the descriptor file.

Abstract: Flags are used to mark portions of content in a digital work to permit marking or demarcation of portions of the document. The demarcated portions can be handled in various ways. For example, different usage rights can be applied to demarcated portions, the demarcated portionis can be culled for use as a summary, or the like. The flags can be used to demarcate portions of content that has been downloaded to keep track of payment and download status and thus add flexibility to electronic distribution of content. A flag usage rights element can be attached to limit and control access to flags in a desired manner.

Abstract: A receiving apparatus receives digital broadcast signals from a plurality of broadcasting companies in different receiving modes from each other at low cost. It is determined to what limited receiving mode an IC card, mounted to an IC card interface section, corresponds. When the IC card is an effective IC card which corresponds to the limited receiving mode of an output stream selected by the user, a CPU performs control in such a manner that the limited receiving processing is conducted for the output stream by use of the contract information and the scramble key information controlled by the IC card. Specifically, when reception of the program designated by the user through a selecting operation is limited, the CPU allows a descrambling section to unscramble the output stream, so that the user can watch and listen to the program. By simply exchanging the IC cards mounted on the interface section, it becomes possible to receive the digital broadcast signals from the broadcasting companies.

Abstract: Music is blanket transmitted (for example, via satellite downlink transmission) to each customer's computer-based user station. Customers preselect from a list of available music in advance using an interactive screen selector, and pay only for music that they choose to have recorded for unlimited playback, for example, by a “CD burner”. An “ID tag” is woven into the recorded music so that any illegal copies therefrom may be traced to the purchase transaction.

Abstract: Content level filtering or masking of digital content that is broadcast, multicast, or otherwise distributed to receivers in a communications system. Instead of controlling the content only at the location of the broadcaster or at the receiver, the present invention provides the capability to control access to the content, and manipulate the content itself via a masking operation, at any point in the content distribution hierarchy or transmission chain. The present invention provides enhanced customer choice to different versions of the content and content creator control over content deemed to be too objectionable or too sensitive to be transmitted without partial concealment or obfuscation. A mask may be specified to change the content distributed further down the distribution hierarchy.

Abstract: A cable television system provides conditional access to services. The cable television system includes a headend from which service “instances”, or programs, are broadcast and a plurality of set top units for receiving the instances and selectively decrypting the instances for display to system subscribers. The service instances are encrypted using public and/or private keys provided by service providers or central authorization agents. Keys used by the set tops for selective decryption may also be public or private in nature, and such keys may be reassigned at different times to provide a cable television system in which piracy concerns are minimized.

Abstract: A conditional access system includes an EMM (Entitlement Management Message) analyzer for retrieving partial viewing authorization information. When the partial viewing authorization information permits partial viewing, ECM (Entitlement Control Message) is decrypted using work keys, and scrambling keys are intermittently retrieved from the ECM. This can solve a problem of a conventional conditional access system in that an unauthorized user's receiver cannot display pictures at all because the receiver cannot retrieve scrambling keys, and hence the user cannot enjoy a program even to such a degree as to perceive its feeling as in analog broadcasting systems, and thus the user cannot decide as to whether to make contract or not with viewing the program to some extent, which prevents the provider of the program from offering effective invitation to the user.

Abstract: The present invention is a method and apparatus for providing copy protection for a content. A descrambler descrambles the content delivered by a content provider using a local key. A key generator is coupled to the descrambler to generate the local key from a programmable user key according to an authorization code provided by the content provider.

Abstract: A CATV conditional access system equipped with a digital head end which transmits picture signals of digital programs in a batch mode to terminals provided within a plurality of areas. This digital head end transmits area codes for the respective areas and data about a list table to the terminals employed in the plural areas. In this list table, digital programs of not-yet-provided services for the respective areas are indicated. The area codes are used to recognize such areas belonging to the own terminals. Each of the terminals excludes the picture signal of the digital program of the not-yet-provided service in the related area by identifying the area code with the list table of the not-yet-service digital channel.

Abstract: A copyright protection system for protecting content wherein a time dependent ticket is calculated at a source device by combining a checkpoint with a ticket. The checkpoint is transmitted from a display device to the source device prior to the source device transmitting watermarked content to the display device. The checkpoint is also stored at the display device. Thereafter, the source device transmits, to the display device, watermarked content, the ticket, and the time dependent ticket. At the display device, the stored checkpoint is compared to a current count of a local clock that was utilized for producing the checkpoint. If the stored checkpoint is within a window of time of the local clock, then the stored checkpoint is combined with the ticket in the same way that the checkpoint is combined with the ticket at the source device.

Abstract: An improved system, method, and computer program product is provided to manage userid/password combinations by utilizing a universally accessible Internet location. This site stores and manages an encrypted database containing the customers multiple userid and password combinations, and also acts as the repository and distribution center for the software used to access and manage the database by the customer. In one embodiment, these applications are designed to work seamlessly with the Internet connection-software (e.g. a set of buttons on a browsers tool bar). Encryption is used on both the client and/or server side to ensure security and integrity.

Abstract: A system and method for enabling broadcast programs to be copied once only by consumer recorders includes writing a unique media identification on each blank disk to which content is to copied in a read-only area of the disk before it is initially recorded. Also, a one-way key management media key block is written to the disk. A content key is derived by combining a media key, derived from the media key block, with the media identification. Additionally, to facilitate copying the content one time only, an exchange key is established between the recorder and a sender such as a satellite receiver or a disk player that is associated with the recorder, and the exchange key is modified with special numbers representing control commands including copy once and copy no more. The exchange key is then encrypted using the content key and then hashed with a nonce to render a bus content key. The bus content key is then used to encrypt the data for copying the data to a disk.

Abstract: A single decryption engine is used for decrypting a plurality of encrypted transport streams. Packets in each of the plurality of encrypted transport streams are tagged with a tag value to indicate their origin stream. The tagged packets from the plurality of encrypted transport streams are merged into a merged transport stream. The packets in the merged transport stream are decrypted with the decryption engine to produce a decrypted merged transport stream. The decrypted merged transport stream is split into a plurality of decrypted transport streams, equal in number to the plurality of encrypted transport streams, by routing packets in the decrypted merged transport stream to specific decrypted transport streams according to their tag value. A null-packet padding technique, a gapped-clock technique and a multi-port static RAM controller technique are disclosed.

Abstract: The invention to which this application relates is a system for providing conditional access to a certain portion or portions of data held on a storage media such as a DVD. The system includes the provision of an actuating means which can or can be used to transmit a signal of a predesignated form to processing apparatus in which the storage media can be processed. The portion or portions of data with conditional access can only be accessed and processed when the said predesignated signal is received therefore allowing a level of additional security, prevention of unauthorised access an increased surprise element when the access is achieved and hence increased level of interactivity to be provided.

Abstract: A method and system are provided for impulse purchasing of services over a communication network, such as a cable or satellite television network. Such services can include games or information accompanying television programming, home-shopping, e-mail services, streaming media and the like. Security is provided through entitlements generated by the access controller 14 and entitlement tokens generated by a secure processor. The secure processor is located at a subscriber terminal 16 through which a subscriber orders and obtains the services. A token is generated when the subscriber either selects the service, if pre-authorized, or when the service is purchased on impulse. The token is secure and signed, and may be used by a policy/proxy server 18 subtending to the Network Operator's ISP and associated services to further facilitate offering these services to the subscribers.

Abstract: A personalized smart card stores therein public and private cryptography keys stored which are used to securely request and receive subscriber content data from a service provider, utilizing a remote control device.

Abstract: A system and method of receiving real-time multimedia via a network, includes transmitting a request for the multimedia from a client interface. The request obtains a reply response containing a control message having a first encryption key and a unique software identifier containing an entitlement message, which has a second encryption key. The control message defines content stream information and access criteria, and the entitlement message defines the client interface entitlement rights. The unique software identifier decrypts the multimedia in real-time, in accordance with the content stream information and access criteria, in order to render the multimedia at the client interface.

Abstract: A method for delivering computer code to a plurality of processing units is disclosed. A first set of digital data is distributed to the plurality of processing units. The first set of digital data is unencrypted and comprises a first set of computer code and an identification label. The first set of code is executable by the plurality of processing units. At least one of the processing units sends the identification label to a remote station. The remote station then encrypts a second set of computer code and delivers the encrypted code to the requesting processing unit. The requesting processing unit can decrypt the encrypted computer code.

Abstract: A method and apparatus for providing an integrated presentation of existing media program services and secondary media program services is described.

Abstract: A cable television system provides conditional access to services. The cable television system includes a headend from which service “instances”, or programs, are broadcast and a plurality of set top units for receiving the instances and selectively decrypting the instances for display to system subscribers. The service instances are encrypted using public and/or private keys provided by service providers or central authorization agents. Keys used by the set tops for selective decryption may also be public or private in nature, and such keys may be reassigned at different times to provide a cable television system in which piracy concerns are minimized.

Abstract: The inventive method allows to secure data relating to users of a public key infrastructure who may present certificates (11) at an institution (30) in order to initiate transactions. For this purposes the institution (30) uses and securely stores a secret key or a key pair which is designed for encrypting and decrypting data. Based on an agreement between a certificate holder and the institution (30), corresponding relational data are generated. Then said relational data are encrypted with the institution's (30) secret key or the first key of said key pair. Subsequently the encrypted relational data are integrated into the certificate (11) which preferably adheres to ITU recommendation X.509 version 3.

Abstract: A system for restricting access to transmitted programming content is disclosed, which transmits a program identifier with the encrypted programming content. A set-top terminal or similar mechanism restricts access to the transmitted multimedia information using stored decryption keys. The set-top terminal receives entitlement information periodically from the head-end, corresponding to one or more packages of programs that the customer is entitled to for a given period. Each program is encrypted by the head-end server prior to transmission, using a program key, Kp, which may be unique to the program. The set-top terminal uses the received program identifier, p, together with the stored entitlement information, to derive the decryption key necessary to decrypt the program. Each of the k-bit program keys, Kp, used to encrypt transmitted programs is obtained by applying one or more pseudo-random hash functions, H, such as a length-doubling hash function, H, to a master key, m.

Abstract: In a conditional access system, a system and method for descrambling a scrambled instance having a predetermined encryption cycle rate is claimed. The invention takes advantage of the inherent encryption period associated with a scrambled instance to control subscriber access to scrambled information.

Abstract: Conditional access system for controlling the access of receivers of end-users to a data content source in an uplink system. Said uplink system comprises a scrambler for scrambling data content supplied from the data content source, an entitlement control message generator for generating entitlement control messages containing a control word and an entitlement identification and a transmitter for transmitting the scrambled data content and the entitlement control messages. A descrambler and an entitlement control message decoder are associated to the receiver. If a match between the entitlement in the entitlement control message and the entitlement of the end-user exists, the entitlement control message decoder supplies a control word to the descrambler for descrambling a part of the received scrambled content for which the receiver is entitled.

Abstract: An apparatus and method for controlling viewing of video programs. The apparatus includes a signal unit for receiving and processing a video signal, a decoding unit for decoding a grade code of a video program contained in the video signal, a key input unit for receiving control data from a user wherein the control data includes a secret number, a storage unit for prestoring a grade code and a secret number, and a control unit for comparing the decoded grade code with the prestored grade code, comparing the secret number inputted to the key input unit with the prestored secret number if the decoded grade code matches the prestored grade code, and outputting the video signal to the user if the secret numbers match.

Abstract: The descrambling device comprises hardware resources (1) and first memory zones (CA1, CA2, . . . , CAn) to store at least two different access control codes for controlling the hardware resources. The device also contains an arbitration code for selecting one access control code to control the hardware resources in order to share access to the hardware resources from the access control codes. Access control codes can be downloaded in the first memory zones by means of a loader contained in the device.

Abstract: Aspects for a heterogeneous computer network system with unobtrusive cross-platform user access are described. In an exemplary system aspect, the system includes a plurality of computer systems coupled in a network, each of the plurality of computer systems operating according to one of a plurality of operating system platforms, each operating system platform having an associated security mechanism. The system further includes an enterprise directory included on at least one server system of the plurality of computer systems, the enterprise directory configured for security interception to allow an authorized user access among the services of the plurality of computer systems without affecting the associated security mechanisms of the plurality of operating system platforms.

Abstract: A system, method, and apparatus suitable for automatically detecting certain supervised users of a device and alerting an authorized user of information regarding that use. When a particular, supervised user and device are recognized, the supervised user's use of the device is monitored by generating a usage history accessible to the authorized user.

Abstract: A digital satellite broadcast receiving system is proposed in which the necessary packets of an MPEG2-based transport stream can be transferred to the system memory of a computer to facilitate processing of packets by a CPU. The system has means for filtering packets, by packet ID, from an MPEG2-based transport stream, which is output by a digital satellite broadcast tuner, to facilitate section formation from packets of the MPEG2-based transport stream by a CPU of a computer, filtering being performed after the transport stream is descrambled if the broadcast is a subscription broadcast; a buffer memory for storing the filtered data, which has been output by the filter means, until the data can be accessed by a host bus; and DMA control means for transferring, by direct memory access, content of the buffer memory to the system memory of the computer via the host bus.

Abstract: A data processing apparatus for coding data includes a coder for generating third data by coding first data and second data. A decoding-information generator generates decoding information, the third data being decoded into the first data and the second data based on the decoding information. An embedding coder embeds the decoding information generated by the decoding-information generator into the third data, thereby generating embedded data.

Abstract: Systems and methods that may securely control access to device functions are disclosed. A request is received to enable a feature of the device. In one embodiment, the device may be a set top box, for example. The device determines whether the feature is disabled, whether the feature can be enabled with authorization and whether a requester is authorized to enable the feature of the device. If the feature is disabled, if the feature can be enabled with authorization and if the requester is authorized to enable the feature of the device, then the feature of the device is enabled.

Abstract: A method and apparatus for controlling display of content signals begins by receiving a content signal that includes video content and at least one associated content control indicator. The content signal may also include audio content associated with the video content. The processing continues by comparing the at least one associated content control indicator (e.g., a rating of mature subject matter of the content signal) with at least one content control setting (e.g., a parental setting based on allowable viewing of rated content signals). When the associated content indicator compares unfavorably to the content control setting, a video graphics processor scrambles the at least a portion of the video content. The scrambled video content is then provided to a video rendering device for subsequent display.

Abstract: A conditional access system for controlling the access of receivers of end-users to data content transmitted from a data content source in an uplink system. The uplink system scrambles the content supplied from the content source, generates entitlement control messages containing a control word and an entitlement identification, and transmits the scrambled content and the entitlement control messages. A descrambler, an entitlement control message decoder and storage for recording entitlement identifications are associated to the receiver. The entitlement control message decoder supplies a control word to the descrambler for descrambling a part of the received scrambled content for which the receiver is entitled, if a match between the entitlement identification in the entitlement control message and the recorded entitlement identification exists. The content is subdivided into scenes having their own scene identification.

Abstract: A cable television system provides conditional access to services. The cable television system includes a headend from which service “instances”, or programs, are broadcast and a plurality of set top units for receiving the instances and selectively decrypting the instances for display to system subscribers. The service instances are encrypted using public and/or private keys provided by service providers or central authorization agents. Keys used by the set tops for selective decryption may also be public or private in nature, and such keys may be reassigned at different times to provide a cable television system in which piracy concerns are minimized.

Abstract: A key delivery method for use in an encoded communications system in which at least one encoded item including a first item encoded with a first item control word is sent in a communication stream from a sender to a receiver, the method including transmitting an item entitlement control message (IECM) including item control information, transmitting a stream entitlement control message (SECM) including stream control information, and combining at least part of the item control information and at least part of the stream control information to produce the first item control word. Related methods and apparatus are also disclosed.

Abstract: A method and apparatus for setting a TV operation environment for users submitting authorizing passwords. The method of setting a user environment of a television (TV) includes displaying a plurality of icons of Identifications (IDs) for respective users, each of the IDs corresponding to an operation environment for a user. If an ID icon is selected among the displayed icons, a password corresponding to the selected ID icon is authenticated, and if a user is authenticated by the password, a preset operation mode for the user is set.

Abstract: In response to a user request to view specific digital content, the user's set top box (STB) accesses a verification entity via a persistent network connection. The STB establishes the user's identity with the verification entity, for instance, by reading identity credentials from a smart card. In response to the verification entity having stored a license for the user to view the digital content, the STB receives a license key from the verification entity. In addition, the STB receives an encrypted access key from an access key source corresponding to a segment of encrypted digital content. The license key is used to decrypt the encrypted access key, which is, in turn, used to decrypt the segment of encrypted digital content. A user may transfer his or her license in whole or in part to another user by sending a transfer request to the verification entity.

Abstract: A technique is disclosed which, in viewing the digital broadcasting, allows conditional access information to be verified without any waiting time and the security of the conditional access information to be improved. Specifically, when real-time processing for viewing the digital broadcasting is terminated, background processing for verifying the conditional access information is carried out. That is, the waiting time for verification processing is made unnecessary by verifying the conditional access information in the background.

Abstract: At the moment of the diffusion of Pay-TV with multi-channel signals, each channel is associated to authorization messages (ECM) which allow to decrypt this channel according to the rights of the subscriber. When changing channel, a very short time is accepted before one has determined these new rights in relation with the new channel. The heavy encrypting algorithms are thus excluded. To avoid this drawback, to decrypt a channel, a system is proposed using the combination of the authorization information for a channel (ECM), and thus encrypted by a fast algorithm, with authorization information (MECM) for a group of channels. These latter are encrypted by a high security algorithm and are thus slower to decrypt.

Abstract: A setback decoder monitors the IF output from a cable-ready receiver and automatically provides a descrambled audio/video signal back to the receiver for output to the subscriber. When the receiver is tuned to a CATV channel which provides signals in a scrambled format, the decoder detects the scrambled signal, determines whether the subscriber is authorized to view the selected program, and descrambles the signal to provide a descrambled output signal to the receiver. The receiver detects the audio/visual output from the decoder and automatically outputs the audio/visual information to the subscriber.

Abstract: A hierarchical cryptographic system has distributed authority among different classes of units in the system. The system may comprise a trusted authority, a first unit authorized by the trusted authority to distribute public and private signature and encryption keys. A second unit accepts for use one or more of the keys only after performing a verification program using the public signature key of the trusted authority. The invention also comprises a unit of a cryptographic system having a processor and a read only memory. The read only memory has stored therein a verification program which includes a public signature key of a trusted authority, and the verification program is made a permanent part of the read only memory during the formation process of the read only memory prior to the application of electrical power to the read only memory.

Abstract: A book data service system in which the book data can be delivered by the broadcasting such that the book data can be delivered to any user located at any place promptly and economically, without causing the waste of the resources. A book data service system if formed by at least one data center including: a data center computer for storing and managing book data; and a broadcasting facility for broadcasting the book data stored and managed by the data center computer according to a prescribed communication protocol using a synchronization control and an error correction scheme suitable for data delivery by broadcasting without confirmation from a receiving side; and a plurality of user terminals, each user terminal including: a receiver for receiving the book data broadcasted from the broadcasting facility of the data center; a user terminal computer for storing and managing the book data received by the receiver; and a display for displaying the book data stored and managed by the user terminal computer.

Abstract: A method is provided for protecting stored-program control systems, in particular in motor vehicles, which offers a software protection system for programming. A programming routine for programming by an external device is subdivided into segments in such a way that queries for programming authorization can be accomplished between the individual segments.

Abstract: An information broadcasting method, a receiver, and an information processing apparatus make it possible to secure safety of information transmission between an information center and information. By encrypting confirmation information with a method making it possible to decipher the confirmation information only in the information terminal that becomes its receiver when an information center transmits the contents of the response signal (S30) transmitted from the information terminal (9) to the information center (3, 22) as the confirmation information, it becomes possible to secure safety of information transmission between the information center and information terminal.

Abstract: A method and apparatus for securely restricting the viewing of television programs. When a television program has been received along with rating data associated with a rating of the television program; length data associated with a length of the program, a microcomputer determines whether the rating data are higher than a predetermined viewing restricting level. If the rating data have been found higher, a muting circuit mutes the television program until it ends with reference to the television program length data, and the program corresponding to the rating data is outputted from a tuner.