WO2000064181A1 - Automatic initialization of an advanced set-top box in a cable television system by downloading software or firmware over the cable system - Google Patents

Automatic initialization of an advanced set-top box in a cable television system by downloading software or firmware over the cable system Download PDF

Info

Publication number
WO2000064181A1
WO2000064181A1 PCT/US2000/010018 US0010018W WO0064181A1 WO 2000064181 A1 WO2000064181 A1 WO 2000064181A1 US 0010018 W US0010018 W US 0010018W WO 0064181 A1 WO0064181 A1 WO 0064181A1
Authority
WO
WIPO (PCT)
Prior art keywords
base platform
top terminal
code
platform code
code object
Prior art date
Application number
PCT/US2000/010018
Other languages
French (fr)
Inventor
Christopher Poli
Christopher S. Del Sordo
Douglas S. Makofka
Jack M. Birnbaum
Lawrence Vince
Ardie Bahraini
Robert P. Mullins
Ira S. Lehrman
Original Assignee
General Instrument Corporation
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by General Instrument Corporation filed Critical General Instrument Corporation
Priority to BR0009901-5A priority Critical patent/BR0009901A/en
Priority to EP00923343A priority patent/EP1172005A1/en
Priority to AU43486/00A priority patent/AU4348600A/en
Priority to CA002370214A priority patent/CA2370214A1/en
Publication of WO2000064181A1 publication Critical patent/WO2000064181A1/en

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/81Monomedia components thereof
    • H04N21/8166Monomedia components thereof involving executable data, e.g. software
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00Arrangements for software engineering
    • G06F8/60Software deployment
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00Arrangements for software engineering
    • G06F8/60Software deployment
    • G06F8/61Installation
    • G06F8/64Retargetable
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/4401Bootstrapping
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/235Processing of additional data, e.g. scrambling of additional data or processing content descriptors
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/434Disassembling of a multiplex stream, e.g. demultiplexing audio and video streams, extraction of additional data from a video stream; Remultiplexing of multiplex streams; Extraction or processing of SI; Disassembling of packetised elementary stream
    • H04N21/4348Demultiplexing of additional data and video streams
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/435Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/443OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
    • H04N21/4432Powering on the client, e.g. bootstrap loading using setup parameters being stored locally or received from the server
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/4508Management of client data or end-user data
    • H04N21/4516Management of client data or end-user data involving client characteristics, e.g. Set-Top-Box type, software version or amount of memory available
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/454Content or additional data filtering, e.g. blocking advertisements
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/65Transmission of management data between client and server
    • H04N21/654Transmission by server directed to the client
    • H04N21/6543Transmission by server directed to the client for forcing some client operations, e.g. recording
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/81Monomedia components thereof
    • H04N21/8166Monomedia components thereof involving executable data, e.g. software
    • H04N21/818OS software
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00Television systems
    • H04N7/16Analogue secrecy systems; Analogue subscription systems
    • H04N7/162Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
    • H04N7/165Centralised control of user terminal ; Registering at central

Definitions

  • the present invention relates to the field of initializing a set-top terminal of a cable television system and upgrading the software or firmware in the set-top terminal. More particularly, the present invention relates to the field of providing an automatic identification and acquisition of an appropriate base platform code and other code objects for the terminal over the cable network.
  • the set-top terminal is a box of electronic equipment that is used to connect the subscriber's television, and potentially other electronic equipment, with the cable network.
  • the set-top box is usually connected to the cable network through a co-axial wall outlet.
  • the set-top box is essentially a computer that is programmed to process the signals from the cable network so as to provide the subscriber with the cable services.
  • These services from the cable television company typically include access to a number of television channels and, perhaps, an electronic program guide. Additional premium channels may also be provided to subscribers at an additional fee. Pay-per-view events and video-on-demand may also be provided over the cable network.
  • the set-top box is programmed to provide these and other services to the subscriber.
  • the services of the cable company need not be limited to providing television programming.
  • Some cable companies are now offering internet access and e-mail over their cable networks at speeds much faster than are available over conventional telephone lines. It is anticipated in the future that more and more services will be provided over the cable network, including even basic telephone service.
  • each home or office may have a single connection, via the cable network, to all electronic data services.
  • a new set-top terminal When a new set-top terminal is added to the cable network, it must be initialized. To initialize a set-top terminal, the terminal must be provided with the programming required to allow it to function within the specific cable network to which it is connected and to thereby provide the services for which the subscriber has paid. Additionally, as the cable network and the services provided evolve, the set-top terminal must also evolve to be able to provide subscribers with all the services of the cable network. This set-top box evolution will primarily involve changes to the programming, or perhaps a re- initialization, of the set-top box. By upgrading the soft- or firmware of the set-top box, the box can be made to perform more efficiently or offer new services as the cable network evolves.
  • the headend is the facility from which the cable network operator broadcasts television signals and provides other services over the cable network.
  • Software that is provided to the population of set-top terminals could be broadcast from the headend over the cable network.
  • problems associated with initializing and upgrading set-top terminals by broadcasting programming from the headend For example, over time the population of set-top terminals will likely include different makes and models of set-top terminals with different capacities.
  • the software required to initialize or upgrade each make and model of set-top terminal may be different. Consequently, there is a need in the art for a method of matching the proper programming code to the capabilities of the set-top terminal being initialized or upgraded. Additionally, there is a need to automate the initialization process so as to eliminate or decrease the time required by a technician to install, upgrade or re-initialize a set-top terminal.
  • the present invention may be embodied and described as a method of initializing a set-top terminal in a cable television system by automatically executing a boot code object stored in a memory unit of the set-top terminal upon provision of power to the set-top terminal.
  • the boot code then automatically locates, acquires and executes a base platform code object.
  • the base platform code object can process television signals, but cannot provide any higher set-top terminal functions.
  • Acquiring the base platform code object may include locating a transmission of the base platform code object within a data transport stream broadcast over the cable television system and downloading the base platform code.
  • locating and acquiring the base platform code object may include identifying the base platform code object already stored in the memory unit of the set-top terminal.
  • the method of the present invention preferably further includes checking the authentication and authorization of the base platform code object before executing the base platform code object. Once the base platform code object is launched, the method includes passing control of the set-top terminal to the executing base platform code object from the boot code object.
  • the method of the present invention proceeds by locating, acquiring and executing an operating system object under the direction of the executing base platform code object.
  • the operating system object may be downloaded from the data transport stream of the cable television system or pulled from the memory unit of the set-top terminal.
  • the set-top terminal may receive an initialization message over the cable television system specifying where in the data transport stream to locate and download the operating system object. The operating system is then checked for authorization and authenticated before being executed.
  • the method of the present invention also preferably comprises providing two set stack points within the memory unit of the set-top terminal; always storing the base platform code object in the memory unit beginning at a first of the two set stack points; and always storing the operating system object in the memory unit beginning at a second of the two set stack points.
  • the method may also include re- executing the boot code object in response to a reset message received over the cable television system.
  • the boot code object is stored in a read-only memory portion of the memory unit.
  • the present invention also encompasses the hardware and system elements of a set-top terminal required to implement the method described above. These include a central processor of the set-top terminal for executing the various code objects stored in memory and a tuner and modem allowing the set-top terminal to receive and/or transmit data over the cable television system.
  • Fig. 1 is a block diagram illustrating the three different stages at which different programming packages have control of the set-top terminal during the initialization process of the present invention.
  • Fig. 2 is a flow chart illustrating the steps of the initialization process for a set-top terminal according to the present invention.
  • Fig. 3 is a block diagram of the various memory devices and some code objects used in a set-top box according to the present invention.
  • the present invention addresses the problems involved in initializing new set-top boxes or re-initializing existing set-top boxes using programming code broadcast over the cable network. This process includes providing those code objects to the set-top boxes that are necessary to allow those set-top boxes to function within the cable system and provide the services purchased by subscribers.
  • the present invention aims to provide a set-top terminal architecture that includes a resident boot code object.
  • the boot code object (302) resides in the set-top terminal (300), preferably in readonly memory (ROM) (301) and can automatically execute and initialize or reinitialize the set-top terminal.
  • the boot code will preferably be automatically executed by the central processor (not shown) of the set-top terminal. Execution of the boot code may be triggered by and immediately follow connection of power to the set-top terminal.
  • the present invention may additionally require connection of the transport stream signal from the cable system before execution of the boot code is triggered. Once the boot code is executing, no further action by the user/installer need be required.
  • the boot code of the present invention will automatically find, download and begin execution of the correct software code object or objects needed to initialize the set-top terminal.
  • the boot code will locate, identify and download the required programming from among potentially many code objects that might be multiplexed on the transport stream coming from the headend facility of the cable television system.
  • the boot code recognizes the hardware configuration of the set-top terminal in which it resides via an internal ROM coded identifier. This identifier is matched against a value carried in an object download locator message from the transport stream to insure that the boot code obtains and downloads objects appropriate to the set-top terminal in which the boot code is resident.
  • boot code of the present invention will identify an appropriate control channel frequency, find the stream of control data packets within that control channel, identify and download the correct object from among the objects on the transport stream, verify that the downloaded code is authorized and error-free, and start the downloaded code without direct assistance by a technician or intervention from the headend.
  • boot code as used herein comprises the minimal code needed to accomplish this functionality.
  • the first is the initial programming of the set- top box.
  • the second is upgrading the programming or re-initialization of the set-top box after that box has been placed in service.
  • the initial programming of the set-top box is often performed by the cable system operator after the set-top box has purchased from a manufacturer. Because each cable network is designed and built at different times by different service providers, each cable network may have a different design, architecture and code objects. Moreover, the specific services offered may vary among cable networks. Therefore, to adapt the set-top box to function with the specific environment of a service provider's cable system and to provide the specific group of services currently offered by that particular service provider, the set-top box must be programmed accordingly or "initialized.”
  • the process of initialization of a set-top terminal will now be explained.
  • a set-top terminal In order for a set-top terminal to be initialized, i.e., accept and utilize the initial programming it receives, it must have some base programming that instructs it how to accept and use that initial programming.
  • This base programming within the context of the present invention is called the boot code.
  • the boot code is computer code resident in the permanent memory of the set-top terminal that is loaded, preferably into read-only memory, at the factory and cannot be changed once a terminal has been deployed.
  • the first classification of code is the boot code (1).
  • the boot code is preferably located in the read-only memory of the set-top terminal, but may alternatively be loaded in the Flash memory. While running the boot code (1), the set-top terminal cannot provide any services to the subscriber.
  • the function (2) of the boot code (1) is to search the data transport stream received from the headend facility to locate, acquire and begin execution of the base platform code (3) which is the next tier or classification of programming.
  • the boot code (1) is designed to authenticate the base platform code after the base platform code is downloaded.
  • the boot code (1) will preferably re- authenticate the base platform code every time it launches the base platform object (3).
  • the base platform code (3) is executing, the execution of the boot code (1) is terminated and control of the set-top terminal passes to the base platform code
  • the base platform code (3) may be factory loaded. However, under the principles of the present invention, the base platform code (3) is preferably transmitted to the set-top terminal from the cable headend during the initialization of the terminal. This allows the operator of the cable system to customize the base platform code (3) for optimal operation on the specific cable system where the set- top terminal is deployed. Preferably, the base platform code (3) is transmitted over the cable plant on an out-of-band (OOB) transport stream. However, it is within the scope of the present invention for the base platform code (3) to be transmitted on an in-band control channel.
  • OOB out-of-band
  • the base platform code (3) has two functions.
  • the first function of the base platform code (3) is to provide the basic capability of allowing a subscriber to watch television using the signal from the cable television system.
  • the second function is to control the download (5) of the next classification of code objects, i.e., the target operating system (O/S) and resident applications (6).
  • the base platform code (3) while allowing subscribers to watch television, does not generally support any additional functions of the set-top terminal. However, the base platform code (3) can acquire, authenticate, authorize and execute objects of the third and final classification of programming (e.g., the O/S) (5).
  • the third classification of programming, the operating system and resident applications (6) provide the additional set-top terminal functions available from the cable system.
  • the operating system (O/S) is typically code from a third party (such as Microsoft's WinCETM) that provides access, with the resident applications, to all authorized set-top terminal capabilities.
  • the operating system typically uses an additional embedded code module provided by the manufacturer of the set-top terminal which interfaces the operating system with the particular hardware of that set-top terminal to enable the operating system to function with that specific set-top terminal.
  • Resident applications are computer programs that run on the set-top terminal under the operating system.
  • the resident applications work with the operating system to provide the capabilities of the set-top terminal that are in addition to watching television.
  • the native suite is a specified group of software applications, including the operating system and perhaps various resident applications, that provide the intended functions of the set-top terminal. Specific elements of the native suite are determined by the system operator.
  • the boot code (1) is preferably factory-loaded in the read-only memory (ROM) of the set-top terminal and is executed as soon as AC power is provided to the set-top terminal.
  • the boot code may be executed in response to a reset signal (4) received, for example, from the headend, i.e., the system operator. This allows the system operator to re-initialize the set-top terminal whenever desired.
  • the reset signal (4) is preferably received by the base platform code (3) which then terminates execution of the operating system and resident applications (6), if running, and begins execution of the boot code (1).
  • the reset signal (4) may cause the base platform code (3) to terminate and reload the native suite (6) rather than execute the boot code (1).
  • the boot code (1) acquires and loads the base platform code (3).
  • the base platform code may be provided to the set-top terminal over the cable network from the headend or, alternatively, may be factory- loaded along with the boot code.
  • the base platform code is preferably stored in Flash memory (303) as shown in Fig. 3.
  • the boot code (1) will either download the base platform code (3), for example, over an out-of-band channel from the headend or, if the base platform code was factory-loaded, identify the base platform code (3) in memory.
  • the boot code (1) authenticates the base platform code (3) from whatever source it is obtained and then executes the base platform code (3) .
  • the base platform code (3) acquires the operating system and, preferably, the other objects of the native suite (6).
  • the operating system and the other objects are downloaded from the headend over the cable network.
  • the base platform code (3) will acquire the operating system and other objects when first executed or, while running, in response to an initialization message (4) from the system operator.
  • the initialization message (4) maybe provided over the cable network.
  • the operating system and resident applications (6) are then executed when the native suite is acquired, authorized and authenticated.
  • Fig. 2 is a flowchart providing a more detailed explanation of the initialization sequence according to the present invention.
  • the boot code is executed (229).
  • the boot code must first determine whether the set-top box has or must acquire the base platform code. To determine this, the boot code first checks the flash memory for the base platform code, the last known carrier (LKC) frequency of the control channel from the headend, and an Entitlement Management Message Provider Identification ( EMM Provider ID) (201, 202).
  • LLC last known carrier
  • EMM Provider ID Entitlement Management Message Provider Identification
  • the boot code will conclude that it must acquire the base platform code and will hunt for the out-of- band channel or the in-band channel from which the base platform code can be obtained.
  • the boot code seeks to acquire the base platform code if (1) the base platform code, last known carrier and EMM Provider ID are not stored in the Flash memory, (2) the base platform code in the Flash memory fails an authentication check or (3) non- volatile memory indicates that hunting for the control channel (likely an out-of-band channel) is required.
  • the boot code proceeds to execute that base platform object after appropriate authorization and authentication as described below. If both the base platform and the O/S are loaded in Flash, the boot code authorizes and authenticates the base platform and then launches the base platform and passes control of the set-top terminal thereto. The base platform object, in turn, authorizes and authenticates (A&A) the O/S. The authenticated O/S is then run and control passes to the O/S.
  • the boot code loads the base platform off of the out-of-band transport stream (203, 204, 207). However, before it is written to Flash memory, a successful authentication is required (206, 205). When the authenticated base platform code is executed, the boot code passes control to the base platform (211,228). If the base platform code fails the authentication check (205), the failed base platform code is deleted (208) and a counter is incremented (209) that tracks the number of attempts to acquire and authenticate a base platform code. If the counter is below a predetermined acceptable number of attempts, the base platform code is again downloaded (207). Alternatively, if the acceptable number of attempts to download the base platform code is exceeded, the set-top terminal may signal the headend for a service call (210).
  • the boot code locates the base platform object using a boot code message or "bootcode_control_message" that is sent periodically on the out-of-band transport stream (204). Use of the bootcode_control_message will now be described in detail.
  • the boot code determines the need to download the base platform object, it first hunts for the control channel.
  • a table of possible carrier frequencies at which the control channel or channels are being broadcast is included in the boot code. These frequencies may be both in-band and out-of-band.
  • the boot code will cause the set-top terminal to tune each of these frequencies in turn until the control channel is located and a carrier lock is obtained. If no control channel is received at a particular frequency for a predetermined period of time, the set-top terminal will tune the next frequency in the table.
  • the control channel is a stream of data packets that can be received and used by the set-top terminal. In order to broadcast a number of different objects simultaneously, the headend will divide objects to be transmitted over the control channel into packets.
  • the packets of the various objects being transmitted can then be interspersed or time-multiplexed together so that several objects are all transmitted essentially simultaneously.
  • the packets for each particular object will have a common packet identifier or "PID."
  • PID packet identifier
  • a set-top terminal can identify the packets for the object it is working to acquire. By acquiring all the packets with a particular PID, the complete object can then be reassembled by the set-top terminal from the set of packets with that particular PID.
  • a set-top terminal can start anywhere in the progression to acquire an object and wrap around until all the necessary packets are downloaded. For example, the set-top terminal may load the first packet it receives with a PID X. That packet may be packet 50 of 100 marked by PID X.
  • the terminal then continues to collect packets 51 to 100 with PID X, then 1 to 49. With all 100 packets obtained, the terminal can reassemble the packetized object.
  • the headend may need to broadcast a number of objects simultaneously because there may be different types or classes of set-top terminals in the population. Each class of set-top terminals may need a different version of, for example, the base platform code, the O/S or a resident application. Therefore, when the boot code is going to initialize the set-top terminal and must acquire the base platform code, the boot code must determine where to acquire the base platform appropriate to the set-top terminal on which it is running.
  • the boot code will begin collecting packets from the transport stream on the control channel that are identified with PID 1.
  • PID 1 is dedicated to the conditional access message in the MPEG standard.
  • the packets of PID 1 will provide the boot code running on the set-top terminal with a Conditional Access Table (CAT) of EMM Provider IDs each of which identifies a PID for a set of packets on the transport stream that constitute an EMM stream (Entitlement Management Message).
  • CAT Conditional Access Table
  • the boot code will begin with the first EMM and begin loading packets from the transport stream that are marked with the EMM PID given by the first EMM Provider ID.
  • the EMM PID packets being acquired will contain the boot code message of the present invention which, in turn, includes a platform identifier.
  • the boot code which is factory-installed in the set-top terminal will also include a platform identifier that is specific to the type of terminal in which the boot code is resident. When running, the boot code will attempt to match the platform identifier provided at the factory with the platform identifier from the boot code message of the EMM PID packets.
  • the boot code will select the next EMM Provider ID in the CAT and check the packets of the EMM PID identified by that EMM Provider ID descriptor for a boot code message with a matching platform identifier. This continues until the matching platform identifier is found (203). It may be possible to search multiple EMM PID's simultaneously to reduce the EMM validation time and the time required to find the matching boot code message.
  • the boot code will look for another control channel on another carrier frequency by returning to the table of carrier frequencies. When another frequency with a control channel is identified and locked, the boot code will extract PID 1 and repeat the process outlined above. This continues until a boot code message with a platform identifier matching the platform identifier of the boot code is found.
  • the boot code When the boot code finds a boot code message with a matching platform identifier, the boot code will extract a download PID (DL PID) specified by the matching boot code message.
  • the download PID (DL PID) is the identifier for the packets that carry the code object, e.g., the base platform code object, that is appropriate for the type of set-top terminal with the platform identifier in the boot code message.
  • the boot code can then download the base platform code object by acquiring the packets with the DL PID and reassembling the data in those packets into the base platform code.
  • an authentication check is performed to verify that the base platform code has been accurately and completely received and has not been altered by an unauthorized party. If the base platform fails the authentication check, it is deleted (208).
  • a load counter may then be checked to determine the number of times the set-top terminal has attempted to acquire a valid base platform code (209). If the counter exceeds a predetermined limit, the set-top terminal may signal the headend for a service call or may indicate the need to request a service call to the subscriber (210). If the load counter is not exceeded, the boot code will revert to the process described above and attempt again to download the base platform code (207).
  • the base platform code is authenticated, it is then launched (211). The base platform code will then determine if the native suite, including the O/S, is loaded in the Flash memory (214). If it is not, the base platform code will seek to download the native suite.
  • the system operator may provide the set-top terminal with a set of "initialization messages" that provide, for example, channel maps, tables and EMM information (219, 212). These messages should be provided before the native suite is loaded.
  • the initialization messages may instruct the set-top terminal where to acquire the native suite.
  • the download of the native suite will include an Object Conditional Access Message (OCAM) that is recorded by the set-top terminal.
  • OCAM Object Conditional Access Message
  • the authentication signature and authorization code for the native suite object are provided in the OCAM and used to authorize and authenticate the native suite in the manner described below.
  • the native suite code will be deleted (225, 217) and the base platform code will again attempt to acquire the native suit (221). If the authorization check is successful, the native suite and any resident applications associated with it, are loaded and an authentication check is performed (222). As before, if the authentication check fails, the downloaded code will be deleted (217) and a load counter will be checked (216) to see if another attempt to download the code should be made or a service call signaled (213). Alternatively, if the authentication check (222, 218) is successful, the native suite and any associated resident applications will be executed beginning with the O/S (226, 227). The base platform code performs the authorization and authentication on the O/S code.
  • the BIOS Basic Input/Output Software
  • the BIOS may perform the authorization and authentication of the remainder of the native suite (215, 224, 222).
  • various portions of the boot process include an object authorization and authentication (A&A) process for newly acquired or located objects.
  • A&A object authorization and authentication
  • the authorization check of the native suite is done within the base platform.
  • the authorization of the base platform is, in turn performed by the boot code, which can only authenticate a base platform object.
  • the O/S of the native suite performs the authentication and authorization of subsequently loaded objects. These checks are required so that, given an interruption in power, etc., the authorization status of the terminal can be verified.
  • Authentication is performed as follows.
  • a code object is broadcast over the cable network, it is associated with an authorization code and an authentication signature.
  • the authorization code is preferably given in an object_id field of the boot code message.
  • the authentication signature is preferably given in an object_description field of the boot code message.
  • the authorization code and authentication signature are provided in an OCAM downloaded with the object.
  • the authentication signature is computed mathematically using a specific algorithm with the code object itself as the input for the algorithm.
  • the signature is then re-computed by the set-top terminal using the same algorithm and the downloaded code as input. If the signature computed by the set-top terminal matches the one transmitted with the code, the code can be implemented with confidence that its has been transmitted properly, without inadvertent or malicious alteration.
  • the present invention provides for two basic ways to upgrade the basic platform in a population of set-top terminals once those terminals have been placed in full service. These two methods of upgrade are (1) a universal upgrade of the entire population (i.e., the entire population tuned to a particular control stream) and (2) a targeted upgrade of a subset or subsets of the population. Both methods may make use of the boot code to perform the upgrade.
  • a universal upgrade is accomplished by broadcasting an order from the headend for all set-top terminals on the control stream to delete their existing base platform object. The boot code then begins executing, assumes control, and performs the initialization procedure outlined above, including replacing the deleted base platform with a base platform downloaded over the cable network.
  • a targeted upgrade applies to a single terminal or a small group of terminals on a given control channel.
  • Each terminal has a specific single-cast address and can, therefore, be addressed by the headend and instructed to delete the existing base platform code and re-initialize with upgrade code.
  • each terminal has one or more multi-cast addresses that are shared by other terminals in the population. Four such multi-cast addresses for each terminal are preferred.
  • the headend can signal a code purge and re-initialization for a specific class of terminals that share that particular multi-cast address.
  • the base platform using standard download messages, sets up download parameters in a start-up database in non-volatile memory (See Fig. 3) and allows the boot code to take control.
  • the boot code then uses the parameters to acquire the upgraded base platform code, replacing the original base platform code. This is done while the older version of the base platform code is still spinning at a location indicated by the boot message.
  • an upgrade need not disturb the base platform code. Rather, the upgrade or reset signal, whether universal or targeted, may instruct the set-top terminal(s) to terminate and delete only the operating system (O/S), the entire native suite, or one or more particular resident applications. Control then returns to the base platform code which will acquire and authenticate a new O/S, entire native suite, or portions of the native suite as necessary. In this way, the native suite (or just the O/S) can be upgraded without requiring the base platform code to be reacquired as well.
  • O/S operating system
  • Fig. 3 illustrates four memory units of a set-top terminal (300) according to the present invention.
  • a read-only memory unit (ROM) (301) contains the boot code (302).
  • a flash memory unit (303) contains the base platform code (304) and the O/S object (306). Aside from these objects, additional flash memory is available (305).
  • Two stack pointers (307, 308) designate absolute locations in the Flash memory (303) for the base platform code (304, 308) and the O/S (306, 307). It is important that these two objects are always located at the same location in Flash (303).
  • a non- volatile memory unit (310) preferably has both a managed and a non- managed segment.
  • the base platform code (304) may store parameters and other data in the non-managed portion of the non- volatile memory unit (310).
  • a random access memory unit (RAM) (309) is provided.
  • Downloaded objects such as the base platform code, the O/S, etc. may be stored in the RAM (309) until authenticated. Once authorization and authentication are successfully completed, the objects may be transferred from the RAM (309) to the Flash memory unit (303) for long-term storage.

Abstract

A method and system for programming a set-top terminal in a cable television system includes automatically launching a boot code object from the read-only memory of the set-top terminal when the terminal is powered or reset. The boot code object will automatically identify and acquire and implement the base platform code, which may be acquired from the memory of the set-top terminal or downloaded from a data transport stream provided over the cable television system. Once the base platform code is executing, the boot code is terminated. The base platform code then automatically locates and acquires the operating system object and any other resident applications of a native suite, which may be pulled from the memory of the set-top terminal or downloaded from the cable system. The base platform code authenticates the native suite and then launches the native suite to provide full set-top terminal functionality.

Description

TITLE OF THE INVENTION
Automatic Initialization of an Advanced Set-Top Box in a Cable Television System by Downloading Software or Firmware over the Cable System
RELATED APPLICATIONS
This application claims priority from a previous U.S. provisional patent application entitled "Software and Firmware Initialization and Upgrade Management System and Method for an Advanced Set-Top Box in a Cable Television System," Serial No. 60/130,328, filed April 21, 1999.
FIELD OF THE INVENTION
The present invention relates to the field of initializing a set-top terminal of a cable television system and upgrading the software or firmware in the set-top terminal. More particularly, the present invention relates to the field of providing an automatic identification and acquisition of an appropriate base platform code and other code objects for the terminal over the cable network.
BACKGROUND OF THE INVENTION
In a typical cable television system, subscribers are provided with a set-top box or terminal. The set-top terminal is a box of electronic equipment that is used to connect the subscriber's television, and potentially other electronic equipment, with the cable network. The set-top box is usually connected to the cable network through a co-axial wall outlet.
The set-top box is essentially a computer that is programmed to process the signals from the cable network so as to provide the subscriber with the cable services. These services from the cable television company typically include access to a number of television channels and, perhaps, an electronic program guide. Additional premium channels may also be provided to subscribers at an additional fee. Pay-per-view events and video-on-demand may also be provided over the cable network. The set-top box is programmed to provide these and other services to the subscriber.
However, the services of the cable company need not be limited to providing television programming. Some cable companies are now offering internet access and e-mail over their cable networks at speeds much faster than are available over conventional telephone lines. It is anticipated in the future that more and more services will be provided over the cable network, including even basic telephone service. Eventually, each home or office may have a single connection, via the cable network, to all electronic data services.
When a new set-top terminal is added to the cable network, it must be initialized. To initialize a set-top terminal, the terminal must be provided with the programming required to allow it to function within the specific cable network to which it is connected and to thereby provide the services for which the subscriber has paid. Additionally, as the cable network and the services provided evolve, the set-top terminal must also evolve to be able to provide subscribers with all the services of the cable network. This set-top box evolution will primarily involve changes to the programming, or perhaps a re- initialization, of the set-top box. By upgrading the soft- or firmware of the set-top box, the box can be made to perform more efficiently or offer new services as the cable network evolves.
In order to initialize new set-top terminals and upgrade the programming in the existing population of set-top boxes on a cable network, it is preferable to transmit the necessary programming to the set-top boxes via the cable network itself. Otherwise, a technician must visit each subscriber to install or upgrade the set-top boxes. Such field installations and upgrades would obviously be at significant expense. The headend is the facility from which the cable network operator broadcasts television signals and provides other services over the cable network. Software that is provided to the population of set-top terminals could be broadcast from the headend over the cable network. However, there are a variety of problems associated with initializing and upgrading set-top terminals by broadcasting programming from the headend. For example, over time the population of set-top terminals will likely include different makes and models of set-top terminals with different capacities. The software required to initialize or upgrade each make and model of set-top terminal may be different. Consequently, there is a need in the art for a method of matching the proper programming code to the capabilities of the set-top terminal being initialized or upgraded. Additionally, there is a need to automate the initialization process so as to eliminate or decrease the time required by a technician to install, upgrade or re-initialize a set-top terminal.
SUMMARY OF THE INVENTION
It is an object of the present invention to meet the above-described needs and others. Specifically, it is an object of the present invention to provide a method and mechanism for matching the proper programming code being broadcast over the cable plant to the capabilities of the set-top terminal being initialized or upgraded. Additionally, it is a further object of the present invention to automate the initialization process so as to eliminate or decrease the time required by a technician to install, upgrade or re-initialize a set-top terminal.
Additional objects, advantages and novel features of the invention will be set forth in the description which follows or may be learned by those skilled in the art through reading these materials or practicing the invention. The objects and advantages of the invention may be achieved through the means recited in the attached claims.
To achieve these stated and other objects, the present invention may be embodied and described as a method of initializing a set-top terminal in a cable television system by automatically executing a boot code object stored in a memory unit of the set-top terminal upon provision of power to the set-top terminal. The boot code then automatically locates, acquires and executes a base platform code object. The base platform code object can process television signals, but cannot provide any higher set-top terminal functions. Acquiring the base platform code object may include locating a transmission of the base platform code object within a data transport stream broadcast over the cable television system and downloading the base platform code. Alternatively, locating and acquiring the base platform code object may include identifying the base platform code object already stored in the memory unit of the set-top terminal. The method of the present invention preferably further includes checking the authentication and authorization of the base platform code object before executing the base platform code object. Once the base platform code object is launched, the method includes passing control of the set-top terminal to the executing base platform code object from the boot code object.
With the boot code object in control of the set-top terminal, the method of the present invention proceeds by locating, acquiring and executing an operating system object under the direction of the executing base platform code object. As before, the operating system object may be downloaded from the data transport stream of the cable television system or pulled from the memory unit of the set-top terminal. In the former case, the set-top terminal may receive an initialization message over the cable television system specifying where in the data transport stream to locate and download the operating system object. The operating system is then checked for authorization and authenticated before being executed.
The method of the present invention also preferably comprises providing two set stack points within the memory unit of the set-top terminal; always storing the base platform code object in the memory unit beginning at a first of the two set stack points; and always storing the operating system object in the memory unit beginning at a second of the two set stack points. The method may also include re- executing the boot code object in response to a reset message received over the cable television system. Preferably the boot code object is stored in a read-only memory portion of the memory unit.
The present invention also encompasses the hardware and system elements of a set-top terminal required to implement the method described above. These include a central processor of the set-top terminal for executing the various code objects stored in memory and a tuner and modem allowing the set-top terminal to receive and/or transmit data over the cable television system.
BRIEF DESCRIPTION OF THE DRAWINGS
The accompanying drawings illustrate the present invention and are a part of the specification. Together with the following description, the drawings demonstrate and explain the principles of the present invention.
Fig. 1 is a block diagram illustrating the three different stages at which different programming packages have control of the set-top terminal during the initialization process of the present invention.
Fig. 2 is a flow chart illustrating the steps of the initialization process for a set-top terminal according to the present invention.
Fig. 3 is a block diagram of the various memory devices and some code objects used in a set-top box according to the present invention.
DETAILED DESCRIPTION OF THE INVENTION:
The present invention addresses the problems involved in initializing new set-top boxes or re-initializing existing set-top boxes using programming code broadcast over the cable network. This process includes providing those code objects to the set-top boxes that are necessary to allow those set-top boxes to function within the cable system and provide the services purchased by subscribers.
Stated in broad principle, the present invention aims to provide a set-top terminal architecture that includes a resident boot code object. As shown in Fig. 3, the boot code object (302) resides in the set-top terminal (300), preferably in readonly memory (ROM) (301) and can automatically execute and initialize or reinitialize the set-top terminal. The boot code will preferably be automatically executed by the central processor (not shown) of the set-top terminal. Execution of the boot code may be triggered by and immediately follow connection of power to the set-top terminal. The present invention may additionally require connection of the transport stream signal from the cable system before execution of the boot code is triggered. Once the boot code is executing, no further action by the user/installer need be required. Moreover, no specific interaction is required between the headend and the set-top terminal that is initializing or booting. As will be described in detail below, the boot code of the present invention will automatically find, download and begin execution of the correct software code object or objects needed to initialize the set-top terminal. The boot code will locate, identify and download the required programming from among potentially many code objects that might be multiplexed on the transport stream coming from the headend facility of the cable television system. The boot code recognizes the hardware configuration of the set-top terminal in which it resides via an internal ROM coded identifier. This identifier is matched against a value carried in an object download locator message from the transport stream to insure that the boot code obtains and downloads objects appropriate to the set-top terminal in which the boot code is resident.
Functionally, the boot code of the present invention will identify an appropriate control channel frequency, find the stream of control data packets within that control channel, identify and download the correct object from among the objects on the transport stream, verify that the downloaded code is authorized and error-free, and start the downloaded code without direct assistance by a technician or intervention from the headend. The term "boot code" as used herein comprises the minimal code needed to accomplish this functionality.
There are essentially two distinct phases of programming a set-top box addressed by the present invention. The first is the initial programming of the set- top box. The second is upgrading the programming or re-initialization of the set-top box after that box has been placed in service.
The initial programming of the set-top box is often performed by the cable system operator after the set-top box has purchased from a manufacturer. Because each cable network is designed and built at different times by different service providers, each cable network may have a different design, architecture and code objects. Moreover, the specific services offered may vary among cable networks. Therefore, to adapt the set-top box to function with the specific environment of a service provider's cable system and to provide the specific group of services currently offered by that particular service provider, the set-top box must be programmed accordingly or "initialized."
The process of initialization of a set-top terminal according to the present invention will now be explained. In order for a set-top terminal to be initialized, i.e., accept and utilize the initial programming it receives, it must have some base programming that instructs it how to accept and use that initial programming. This base programming within the context of the present invention is called the boot code. As described above, the boot code is computer code resident in the permanent memory of the set-top terminal that is loaded, preferably into read-only memory, at the factory and cannot be changed once a terminal has been deployed.
As shown in Fig. 1 , there are three general tiers or classifications of programming that run on or have control of the set-top terminal during different stages in the initialization and operation of the terminal according to the present invention. Referring to Fig. 1, the first classification of code is the boot code (1). The boot code is preferably located in the read-only memory of the set-top terminal, but may alternatively be loaded in the Flash memory. While running the boot code (1), the set-top terminal cannot provide any services to the subscriber. The function (2) of the boot code (1) is to search the data transport stream received from the headend facility to locate, acquire and begin execution of the base platform code (3) which is the next tier or classification of programming.
The boot code (1) is designed to authenticate the base platform code after the base platform code is downloaded. The boot code (1) will preferably re- authenticate the base platform code every time it launches the base platform object (3). When the base platform code (3) is executing, the execution of the boot code (1) is terminated and control of the set-top terminal passes to the base platform code
(3). The base platform code (3) may be factory loaded. However, under the principles of the present invention, the base platform code (3) is preferably transmitted to the set-top terminal from the cable headend during the initialization of the terminal. This allows the operator of the cable system to customize the base platform code (3) for optimal operation on the specific cable system where the set- top terminal is deployed. Preferably, the base platform code (3) is transmitted over the cable plant on an out-of-band (OOB) transport stream. However, it is within the scope of the present invention for the base platform code (3) to be transmitted on an in-band control channel.
The base platform code (3) has two functions. The first function of the base platform code (3) is to provide the basic capability of allowing a subscriber to watch television using the signal from the cable television system. The second function is to control the download (5) of the next classification of code objects, i.e., the target operating system (O/S) and resident applications (6). The base platform code (3), while allowing subscribers to watch television, does not generally support any additional functions of the set-top terminal. However, the base platform code (3) can acquire, authenticate, authorize and execute objects of the third and final classification of programming (e.g., the O/S) (5).
The third classification of programming, the operating system and resident applications (6) provide the additional set-top terminal functions available from the cable system. The operating system (O/S) is typically code from a third party (such as Microsoft's WinCE™) that provides access, with the resident applications, to all authorized set-top terminal capabilities. The operating system typically uses an additional embedded code module provided by the manufacturer of the set-top terminal which interfaces the operating system with the particular hardware of that set-top terminal to enable the operating system to function with that specific set-top terminal.
Resident applications are computer programs that run on the set-top terminal under the operating system. The resident applications work with the operating system to provide the capabilities of the set-top terminal that are in addition to watching television. The native suite is a specified group of software applications, including the operating system and perhaps various resident applications, that provide the intended functions of the set-top terminal. Specific elements of the native suite are determined by the system operator.
As indicated in Figs. 1 and 3, the boot code (1) is preferably factory-loaded in the read-only memory (ROM) of the set-top terminal and is executed as soon as AC power is provided to the set-top terminal. Alternatively, the boot code may be executed in response to a reset signal (4) received, for example, from the headend, i.e., the system operator. This allows the system operator to re-initialize the set-top terminal whenever desired. The reset signal (4) is preferably received by the base platform code (3) which then terminates execution of the operating system and resident applications (6), if running, and begins execution of the boot code (1). Alternatively, the reset signal (4) may cause the base platform code (3) to terminate and reload the native suite (6) rather than execute the boot code (1). As described above, whenever executed, the boot code (1) acquires and loads the base platform code (3). The base platform code may be provided to the set-top terminal over the cable network from the headend or, alternatively, may be factory- loaded along with the boot code. The base platform code is preferably stored in Flash memory (303) as shown in Fig. 3. The boot code (1) will either download the base platform code (3), for example, over an out-of-band channel from the headend or, if the base platform code was factory-loaded, identify the base platform code (3) in memory. The boot code (1) authenticates the base platform code (3) from whatever source it is obtained and then executes the base platform code (3) . The base platform code (3) then acquires the operating system and, preferably, the other objects of the native suite (6). The operating system and the other objects are downloaded from the headend over the cable network. The base platform code (3) will acquire the operating system and other objects when first executed or, while running, in response to an initialization message (4) from the system operator. The initialization message (4) maybe provided over the cable network. The operating system and resident applications (6) are then executed when the native suite is acquired, authorized and authenticated. Fig. 2 is a flowchart providing a more detailed explanation of the initialization sequence according to the present invention. As shown in Fig. 2, when the set-top terminal is first powered, or an appropriate reset signal has been received, the boot code is executed (229). The boot code must first determine whether the set-top box has or must acquire the base platform code. To determine this, the boot code first checks the flash memory for the base platform code, the last known carrier (LKC) frequency of the control channel from the headend, and an Entitlement Management Message Provider Identification ( EMM Provider ID) (201, 202).
If any of three following conditions are discovered, the boot code will conclude that it must acquire the base platform code and will hunt for the out-of- band channel or the in-band channel from which the base platform code can be obtained. The boot code seeks to acquire the base platform code if (1) the base platform code, last known carrier and EMM Provider ID are not stored in the Flash memory, (2) the base platform code in the Flash memory fails an authentication check or (3) non- volatile memory indicates that hunting for the control channel (likely an out-of-band channel) is required.
If the Flash check determines that a base platform code object exists, the boot code proceeds to execute that base platform object after appropriate authorization and authentication as described below. If both the base platform and the O/S are loaded in Flash, the boot code authorizes and authenticates the base platform and then launches the base platform and passes control of the set-top terminal thereto. The base platform object, in turn, authorizes and authenticates (A&A) the O/S. The authenticated O/S is then run and control passes to the O/S.
If the base platform code is not loaded in Flash memory, the boot code loads the base platform off of the out-of-band transport stream (203, 204, 207). However, before it is written to Flash memory, a successful authentication is required (206, 205). When the authenticated base platform code is executed, the boot code passes control to the base platform (211,228). If the base platform code fails the authentication check (205), the failed base platform code is deleted (208) and a counter is incremented (209) that tracks the number of attempts to acquire and authenticate a base platform code. If the counter is below a predetermined acceptable number of attempts, the base platform code is again downloaded (207). Alternatively, if the acceptable number of attempts to download the base platform code is exceeded, the set-top terminal may signal the headend for a service call (210).
Under the principles of the present invention, the boot code locates the base platform object using a boot code message or "bootcode_control_message" that is sent periodically on the out-of-band transport stream (204). Use of the bootcode_control_message will now be described in detail.
When the boot code determines the need to download the base platform object, it first hunts for the control channel. A table of possible carrier frequencies at which the control channel or channels are being broadcast is included in the boot code. These frequencies may be both in-band and out-of-band. The boot code will cause the set-top terminal to tune each of these frequencies in turn until the control channel is located and a carrier lock is obtained. If no control channel is received at a particular frequency for a predetermined period of time, the set-top terminal will tune the next frequency in the table. The control channel is a stream of data packets that can be received and used by the set-top terminal. In order to broadcast a number of different objects simultaneously, the headend will divide objects to be transmitted over the control channel into packets. The packets of the various objects being transmitted can then be interspersed or time-multiplexed together so that several objects are all transmitted essentially simultaneously. The packets for each particular object will have a common packet identifier or "PID." Thus, a set-top terminal can identify the packets for the object it is working to acquire. By acquiring all the packets with a particular PID, the complete object can then be reassembled by the set-top terminal from the set of packets with that particular PID. According to the present invention, a set-top terminal can start anywhere in the progression to acquire an object and wrap around until all the necessary packets are downloaded. For example, the set-top terminal may load the first packet it receives with a PID X. That packet may be packet 50 of 100 marked by PID X. The terminal then continues to collect packets 51 to 100 with PID X, then 1 to 49. With all 100 packets obtained, the terminal can reassemble the packetized object. The headend may need to broadcast a number of objects simultaneously because there may be different types or classes of set-top terminals in the population. Each class of set-top terminals may need a different version of, for example, the base platform code, the O/S or a resident application. Therefore, when the boot code is going to initialize the set-top terminal and must acquire the base platform code, the boot code must determine where to acquire the base platform appropriate to the set-top terminal on which it is running.
Thus, once the carrier lock is achieved and the control channel is being received, the boot code will begin collecting packets from the transport stream on the control channel that are identified with PID 1. PID 1 is dedicated to the conditional access message in the MPEG standard. The packets of PID 1 will provide the boot code running on the set-top terminal with a Conditional Access Table (CAT) of EMM Provider IDs each of which identifies a PID for a set of packets on the transport stream that constitute an EMM stream (Entitlement Management Message).
The boot code will begin with the first EMM and begin loading packets from the transport stream that are marked with the EMM PID given by the first EMM Provider ID. The EMM PID packets being acquired will contain the boot code message of the present invention which, in turn, includes a platform identifier. The boot code which is factory-installed in the set-top terminal will also include a platform identifier that is specific to the type of terminal in which the boot code is resident. When running, the boot code will attempt to match the platform identifier provided at the factory with the platform identifier from the boot code message of the EMM PID packets. If no match is found, the boot code will select the next EMM Provider ID in the CAT and check the packets of the EMM PID identified by that EMM Provider ID descriptor for a boot code message with a matching platform identifier. This continues until the matching platform identifier is found (203). It may be possible to search multiple EMM PID's simultaneously to reduce the EMM validation time and the time required to find the matching boot code message.
If all the EMM Provider IDs in the CAT of PID 1 are checked and no match is found for the platform identifier, the boot code will look for another control channel on another carrier frequency by returning to the table of carrier frequencies. When another frequency with a control channel is identified and locked, the boot code will extract PID 1 and repeat the process outlined above. This continues until a boot code message with a platform identifier matching the platform identifier of the boot code is found.
When the boot code finds a boot code message with a matching platform identifier, the boot code will extract a download PID (DL PID) specified by the matching boot code message. The download PID (DL PID) is the identifier for the packets that carry the code object, e.g., the base platform code object, that is appropriate for the type of set-top terminal with the platform identifier in the boot code message. The boot code can then download the base platform code object by acquiring the packets with the DL PID and reassembling the data in those packets into the base platform code.
As shown in Fig. 2, once the base platform code has been downloaded or identified as already resident in Flash memory, an authentication check (206) is performed to verify that the base platform code has been accurately and completely received and has not been altered by an unauthorized party. If the base platform fails the authentication check, it is deleted (208). A load counter may then be checked to determine the number of times the set-top terminal has attempted to acquire a valid base platform code (209). If the counter exceeds a predetermined limit, the set-top terminal may signal the headend for a service call or may indicate the need to request a service call to the subscriber (210). If the load counter is not exceeded, the boot code will revert to the process described above and attempt again to download the base platform code (207). Alternatively, if the base platform code is authenticated, it is then launched (211). The base platform code will then determine if the native suite, including the O/S, is loaded in the Flash memory (214). If it is not, the base platform code will seek to download the native suite.
With the base platform code running, the system operator may provide the set-top terminal with a set of "initialization messages" that provide, for example, channel maps, tables and EMM information (219, 212). These messages should be provided before the native suite is loaded. The initialization messages may instruct the set-top terminal where to acquire the native suite.
After the native suite has been downloaded, or is found already existing in Flash memory, an authorization check is performed on the native suite (215, 220, 224, 223). The download of the native suite will include an Object Conditional Access Message (OCAM) that is recorded by the set-top terminal. The authentication signature and authorization code for the native suite object are provided in the OCAM and used to authorize and authenticate the native suite in the manner described below.
If the authorization check is not successful, the native suite code will be deleted (225, 217) and the base platform code will again attempt to acquire the native suit (221). If the authorization check is successful, the native suite and any resident applications associated with it, are loaded and an authentication check is performed (222). As before, if the authentication check fails, the downloaded code will be deleted (217) and a load counter will be checked (216) to see if another attempt to download the code should be made or a service call signaled (213). Alternatively, if the authentication check (222, 218) is successful, the native suite and any associated resident applications will be executed beginning with the O/S (226, 227). The base platform code performs the authorization and authentication on the O/S code. If the O/S passes the authorization and authentication checks, the O/S is executed and control is transferred to the O/S. The BIOS (Basic Input/Output Software) may perform the authorization and authentication of the remainder of the native suite (215, 224, 222). In summary, various portions of the boot process include an object authorization and authentication (A&A) process for newly acquired or located objects. The authorization check of the native suite is done within the base platform. The authorization of the base platform is, in turn performed by the boot code, which can only authenticate a base platform object. When running, the O/S of the native suite performs the authentication and authorization of subsequently loaded objects. These checks are required so that, given an interruption in power, etc., the authorization status of the terminal can be verified. If, at any point an authorization or authentication check fails, the object being checked is disabled. Authentication is performed as follows. When a code object is broadcast over the cable network, it is associated with an authorization code and an authentication signature. For the base platform object, the authorization code is preferably given in an object_id field of the boot code message. The authentication signature is preferably given in an object_description field of the boot code message. For other objects, such as the O/S and the native suite, the authorization code and authentication signature are provided in an OCAM downloaded with the object.
The authentication signature is computed mathematically using a specific algorithm with the code object itself as the input for the algorithm. The signature is then re-computed by the set-top terminal using the same algorithm and the downloaded code as input. If the signature computed by the set-top terminal matches the one transmitted with the code, the code can be implemented with confidence that its has been transmitted properly, without inadvertent or malicious alteration.
The present invention provides for two basic ways to upgrade the basic platform in a population of set-top terminals once those terminals have been placed in full service. These two methods of upgrade are (1) a universal upgrade of the entire population (i.e., the entire population tuned to a particular control stream) and (2) a targeted upgrade of a subset or subsets of the population. Both methods may make use of the boot code to perform the upgrade. A universal upgrade is accomplished by broadcasting an order from the headend for all set-top terminals on the control stream to delete their existing base platform object. The boot code then begins executing, assumes control, and performs the initialization procedure outlined above, including replacing the deleted base platform with a base platform downloaded over the cable network.
A targeted upgrade applies to a single terminal or a small group of terminals on a given control channel. Each terminal has a specific single-cast address and can, therefore, be addressed by the headend and instructed to delete the existing base platform code and re-initialize with upgrade code. Alternatively, each terminal has one or more multi-cast addresses that are shared by other terminals in the population. Four such multi-cast addresses for each terminal are preferred. With a multi-cast address, the headend can signal a code purge and re-initialization for a specific class of terminals that share that particular multi-cast address. In a targeted upgrade, the base platform, using standard download messages, sets up download parameters in a start-up database in non-volatile memory (See Fig. 3) and allows the boot code to take control. The boot code then uses the parameters to acquire the upgraded base platform code, replacing the original base platform code. This is done while the older version of the base platform code is still spinning at a location indicated by the boot message.
In addition to the examples given above, an upgrade need not disturb the base platform code. Rather, the upgrade or reset signal, whether universal or targeted, may instruct the set-top terminal(s) to terminate and delete only the operating system (O/S), the entire native suite, or one or more particular resident applications. Control then returns to the base platform code which will acquire and authenticate a new O/S, entire native suite, or portions of the native suite as necessary. In this way, the native suite (or just the O/S) can be upgraded without requiring the base platform code to be reacquired as well.
Fig. 3 illustrates four memory units of a set-top terminal (300) according to the present invention. A read-only memory unit (ROM) (301) contains the boot code (302). A flash memory unit (303) contains the base platform code (304) and the O/S object (306). Aside from these objects, additional flash memory is available (305). Two stack pointers (307, 308) designate absolute locations in the Flash memory (303) for the base platform code (304, 308) and the O/S (306, 307). It is important that these two objects are always located at the same location in Flash (303).
A non- volatile memory unit (310) preferably has both a managed and a non- managed segment. The base platform code (304) may store parameters and other data in the non-managed portion of the non- volatile memory unit (310). Finally, a random access memory unit (RAM) (309) is provided.
Downloaded objects such as the base platform code, the O/S, etc. may be stored in the RAM (309) until authenticated. Once authorization and authentication are successfully completed, the objects may be transferred from the RAM (309) to the Flash memory unit (303) for long-term storage. The preceding description has been presented only to illustrate and describe the invention. It is not intended to be exhaustive or to limit the invention to any precise form disclosed. Many modifications and variations are possible in light of the above teaching.
The preferred embodiment was chosen and described in order to best explain the principles of the invention and its practical application. The preceding description is intended to enable others skilled in the art to best utilize the invention in various embodiments and with various modifications as are suited to the particular use contemplated.

Claims

WHAT IS CLAIMED IS:
1. A method of initializing a set-top terminal in a cable television system comprising automatically executing a boot code object stored in a memory unit of said set-top terminal upon provision of power to said set-top terminal, wherein said boot code automatically locates, acquires and executes a base platform code object.
2. The method of claim 1 , further comprising acquiring said base platform code object by locating a transmission of said base platform code object within a data transport stream broadcast over said cable television system.
3. The method of claim 1, further comprising checking authentication and authorization of said base platform code object before executing said base platform code object.
4. The method of claim 1 , further comprising passing control of said set- top terminal to said executing base platform code object.
5. The method of claim 4, further comprising locating, acquiring and executing an operating system object with said executing base platform code object.
6. The method of claim 5, further comprising: providing two set stack points within said memory unit of said set-top terminal; always storing said base platform code object in said memory unit beginning at a first of said two set stack points; and always storing said operating system object in said memory unit beginning at a second of said two set stack points.
7. The method of claim 5, wherein said acquiring said operating system object further comprises locating and downloading said operating system object from a data transport stream broadcast over said cable television system.
8. The method of claim 7, further comprising receiving, with said set- top terminal, an initialization message over said cable television system specifying where in said data transport stream to locate and download said operating system object.
9. The method of claim 5, further comprising authorizing and authenticating said operating system object before executing said operating system object.
10. The method of claim 1 , further comprising re-executing said boot code object in response to a reset message received over said cable television system.
11. The method of claim 1, further comprising locating and acquiring said base platform code object by identifying said base platform code object stored in said memory unit of said set-top terminal.
12. The method of claim 1 , further comprising storing said boot code object in a read-only memory portion of said memory unit.
13. A system for initializing a set-top terminal in a cable television system comprising: means for automatically executing a boot code object stored in a memory unit of said set-top terminal upon provision of power to said set-top terminal; and means controlled by said executing boot code object for automatically locating, acquiring and executing a base platform code object.
14. The system of claim 13, wherein said means for locating and acquiring said base platform code object further comprising means for locating a transmission of said base platform code object within a data transport stream broadcast over said cable television system.
15. The system of claim 13, further comprising means for checking authentication and authorization of said base platform code object before executing said base platform code object.
16. The system of claim 13, further comprising means for passing control of said set-top terminal to said executing base platform code object.
17. The system of claim 16, further comprising means controlled by said executing base platform code object for locating, acquiring and executing an operating system object.
18. The system of claim 17, further comprising: means for setting two set stack points within said memory unit of said set-top terminal; means for always storing said base platform code object in said memory unit beginning at a first of said two set stack points; and means for always storing said operating system object in said memory unit beginning at a second of said two set stack points.
19. The system of claim 17, wherein said means for acquiring said operating system object further comprise means for locating and downloading said operating system object from a data transport stream broadcast over said cable television system.
20. The system of claim 19, further comprising means for receiving, with said set-top terminal, an initialization message over said cable television system specifying where in said data transport stream to locate and download said operating system object.
21. The system of claim 17, further comprising means for authorizing and authenticating said operating system object before executing said operating system object.
22. The system of claim 13, further comprising means for re-executing said boot code object in response to a reset message received over said cable television system.
23. The system of claim 13 , wherein said means for locating and acquiring said base platform code object comprise means for identifying said base platform code object stored in said memory unit of said set-top terminal.
24. The system of claim 13, wherein said boot code object is stored in a read-only memory portion of said memory unit.
PCT/US2000/010018 1999-04-21 2000-04-14 Automatic initialization of an advanced set-top box in a cable television system by downloading software or firmware over the cable system WO2000064181A1 (en)

Priority Applications (4)

Application Number Priority Date Filing Date Title
BR0009901-5A BR0009901A (en) 1999-04-21 2000-04-14 Method and system for initializing a device top terminal on a cable television system
EP00923343A EP1172005A1 (en) 1999-04-21 2000-04-14 Automatic initialization of an advanced set-top box in a cable television system by downloading software or firmware over the cable system
AU43486/00A AU4348600A (en) 1999-04-21 2000-04-14 Automatic initialization of an advanced set-top box in a cable television systemby downloading software or firmware over the cable system
CA002370214A CA2370214A1 (en) 1999-04-21 2000-04-14 Automatic initialization of an advanced set-top box in a cable television system by downloading software or firmware over the cable system

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US13032899P 1999-04-21 1999-04-21
US60/130,328 1999-04-21
US54567900A 2000-04-07 2000-04-07
US09/545,679 2000-04-07

Publications (1)

Publication Number Publication Date
WO2000064181A1 true WO2000064181A1 (en) 2000-10-26

Family

ID=26828382

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2000/010018 WO2000064181A1 (en) 1999-04-21 2000-04-14 Automatic initialization of an advanced set-top box in a cable television system by downloading software or firmware over the cable system

Country Status (6)

Country Link
EP (1) EP1172005A1 (en)
AU (1) AU4348600A (en)
BR (1) BR0009901A (en)
CA (1) CA2370214A1 (en)
TW (1) TW472490B (en)
WO (1) WO2000064181A1 (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1286262A1 (en) * 2001-08-21 2003-02-26 Canal+ Technologies Société Anonyme Optimising the performance of an operating system of a receiver/decoder
EP1825678A2 (en) * 2004-12-18 2007-08-29 Comcast Cable-Holdings, Llc System and method for secure conditional access download and reconfiguration
US7877591B2 (en) 2003-01-17 2011-01-25 International Business Machines Corporation Hardware abstraction for set-top box operating systems

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5440632A (en) * 1992-12-02 1995-08-08 Scientific-Atlanta, Inc. Reprogrammable subscriber terminal
WO1997030549A1 (en) * 1996-02-14 1997-08-21 Powertv, Inc. Multicast downloading of software and data modules and their compatibility requirements
US5666293A (en) * 1994-05-27 1997-09-09 Bell Atlantic Network Services, Inc. Downloading operating system software through a broadcast channel
US5734589A (en) * 1995-01-31 1998-03-31 Bell Atlantic Network Services, Inc. Digital entertainment terminal with channel mapping
WO1999011060A1 (en) * 1997-08-27 1999-03-04 News America Publications, Inc. Electronic television program guide schedule system and method with scan feature
EP0907285A1 (en) * 1997-10-03 1999-04-07 CANAL+ Société Anonyme Downloading data

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5440632A (en) * 1992-12-02 1995-08-08 Scientific-Atlanta, Inc. Reprogrammable subscriber terminal
US5666293A (en) * 1994-05-27 1997-09-09 Bell Atlantic Network Services, Inc. Downloading operating system software through a broadcast channel
US5734589A (en) * 1995-01-31 1998-03-31 Bell Atlantic Network Services, Inc. Digital entertainment terminal with channel mapping
WO1997030549A1 (en) * 1996-02-14 1997-08-21 Powertv, Inc. Multicast downloading of software and data modules and their compatibility requirements
WO1999011060A1 (en) * 1997-08-27 1999-03-04 News America Publications, Inc. Electronic television program guide schedule system and method with scan feature
EP0907285A1 (en) * 1997-10-03 1999-04-07 CANAL+ Société Anonyme Downloading data

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1286262A1 (en) * 2001-08-21 2003-02-26 Canal+ Technologies Société Anonyme Optimising the performance of an operating system of a receiver/decoder
US7877591B2 (en) 2003-01-17 2011-01-25 International Business Machines Corporation Hardware abstraction for set-top box operating systems
EP1825678A2 (en) * 2004-12-18 2007-08-29 Comcast Cable-Holdings, Llc System and method for secure conditional access download and reconfiguration
EP1825678A4 (en) * 2004-12-18 2010-10-27 Comcast Cable Holdings Llc System and method for secure conditional access download and reconfiguration

Also Published As

Publication number Publication date
TW472490B (en) 2002-01-11
EP1172005A1 (en) 2002-01-16
BR0009901A (en) 2002-03-12
CA2370214A1 (en) 2000-10-26
AU4348600A (en) 2000-11-02

Similar Documents

Publication Publication Date Title
US6718374B1 (en) Method and system for identifying and downloading appropriate software or formware specific to a particular model of set-top box in a cable television system
US8032917B2 (en) Method and system for directing the download of software and firmware objects over a network such as a cable television system
US6813778B1 (en) Method and system for downloading and managing the enablement of a list of code objects
EP1172006B1 (en) Method and system for targeted or universal upgrades of programming in a population of advanced set-top boxes in a cable television system
KR20010030926A (en) Downloading data
WO2001047250A9 (en) Selection between an in-band and an out-of-band channel for downloading code to a set top box
EP1210824B1 (en) Method and system for automatically purging code objects being updated by download
WO2000064181A1 (en) Automatic initialization of an advanced set-top box in a cable television system by downloading software or firmware over the cable system
EP1181824A1 (en) Method and system for locating a control channel and data transport stream within the signal received by a set-top box from a cable television system
MXPA01010582A (en) Automatic initialization of an advanced set-top box in a cable television system by downloading software or firmware over the cable system
MXPA01010583A (en) Method and system for identifying and downloading appropriate software or firmware specific to a particular model of set-top box in a cable television system
MXPA01010584A (en) Method and system for targeted or universal upgrades of programming in a population of advanced set-top boxes in a cable television system
MXPA01010581A (en) Method and system for locating a control channel and data transport stream within the signal received by a set-top box from a cable television system

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AL AM AT AU AZ BA BB BG BR BY CA CH CN CU CZ DE DK EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MD MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT UA UG UZ VN YU ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
ENP Entry into the national phase

Ref document number: 2370214

Country of ref document: CA

Ref country code: CA

Ref document number: 2370214

Kind code of ref document: A

Format of ref document f/p: F

WWE Wipo information: entry into national phase

Ref document number: PA/a/2001/010582

Country of ref document: MX

WWE Wipo information: entry into national phase

Ref document number: 2000923343

Country of ref document: EP

WWP Wipo information: published in national office

Ref document number: 2000923343

Country of ref document: EP

REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

WWW Wipo information: withdrawn in national office

Ref document number: 2000923343

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: JP