WO2004034705A1 - System for secure distribution, storage and conditional retrieval of multimedia content - Google Patents

System for secure distribution, storage and conditional retrieval of multimedia content Download PDF

Info

Publication number
WO2004034705A1
WO2004034705A1 PCT/NO2002/000367 NO0200367W WO2004034705A1 WO 2004034705 A1 WO2004034705 A1 WO 2004034705A1 NO 0200367 W NO0200367 W NO 0200367W WO 2004034705 A1 WO2004034705 A1 WO 2004034705A1
Authority
WO
WIPO (PCT)
Prior art keywords
content
digital
analogue
key
storage
Prior art date
Application number
PCT/NO2002/000367
Other languages
French (fr)
Inventor
Ole Hansvold
Torstein Gleditsch
Original Assignee
Conax As
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Conax As filed Critical Conax As
Priority to PCT/NO2002/000367 priority Critical patent/WO2004034705A1/en
Priority to AU2002334448A priority patent/AU2002334448A1/en
Publication of WO2004034705A1 publication Critical patent/WO2004034705A1/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N5/00—Details of television systems
    • H04N5/76—Television signal recording
    • H04N5/91—Television signal processing therefor
    • H04N5/913—Television signal processing therefor for scrambling ; for copy protection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/234—Processing of video elementary streams, e.g. splicing of video streams, manipulating MPEG-4 scene graphs
    • H04N21/2347—Processing of video elementary streams, e.g. splicing of video streams, manipulating MPEG-4 scene graphs involving video stream encryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/266—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel
    • H04N21/26613—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel for generating or managing keys in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/41—Structure of client; Structure of client peripherals
    • H04N21/414—Specialised client platforms, e.g. receiver in car or embedded in a mobile appliance
    • H04N21/4147—PVR [Personal Video Recorder]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/41—Structure of client; Structure of client peripherals
    • H04N21/426—Internal components of the client ; Characteristics thereof
    • H04N21/42607—Internal components of the client ; Characteristics thereof for processing the incoming bitstream
    • H04N21/42623—Internal components of the client ; Characteristics thereof for processing the incoming bitstream involving specific decryption arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream, rendering scenes according to MPEG-4 scene graphs
    • H04N21/4405—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream, rendering scenes according to MPEG-4 scene graphs involving video stream decryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/167—Systems rendering the television signal unintelligible and subsequently intelligible
    • H04N7/1675—Providing digital key or authorisation information for generation or regeneration of the scrambling sequence
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N5/00—Details of television systems
    • H04N5/76—Television signal recording
    • H04N5/91—Television signal processing therefor
    • H04N5/913—Television signal processing therefor for scrambling ; for copy protection
    • H04N2005/91357—Television signal processing therefor for scrambling ; for copy protection by modifying the video signal
    • H04N2005/91364—Television signal processing therefor for scrambling ; for copy protection by modifying the video signal the video signal being scrambled
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N9/00—Details of colour television systems
    • H04N9/79—Processing of colour television signals in connection with recording
    • H04N9/80—Transformation of the television signal for recording, e.g. modulation, frequency changing; Inverse transformation for playback
    • H04N9/804—Transformation of the television signal for recording, e.g. modulation, frequency changing; Inverse transformation for playback involving pulse code modulation of the colour picture signal components
    • H04N9/8042—Transformation of the television signal for recording, e.g. modulation, frequency changing; Inverse transformation for playback involving pulse code modulation of the colour picture signal components involving data reduction

Definitions

  • the present invention is related to a system for securing distribution of multimedia information content, such as video and audio carried by any digital distribution system such as telephone systems, computer networks, television networks or video discs.
  • the system according to the present invention it is ensured that the content only is presented in an analogue format with a reduced quality, if the content should be copied or sampled to some other illegitimate storage device. Furthermore it is an object of the present invention to encrypt the multimedia content in such a way that, a digital decryption without the proper decrypting and decoding equipment, if the encryption scheme is broken or keys are compromised, will result in distorted audio, video or other analogue output.
  • Yet another object of the present invention is to enable a secure storage of content in a receiver, as to retain all authorization data for the distribution. This implies that if a user has been given a one week viewing authorization of a movie, the movie will not be viewable after that time even if it is stored on the receiver's disk at the beginning of the week.
  • the system according to the present invention principally is divided in two parts, a sending side or transmitter, and a receiving side, a receiver.
  • the sending side contains the necessary equipment to generate keys, distort the signal carrying the content, encrypt the signal, multiplex the keys and the encrypted signal and distribute the resulting encrypted digital output signal to the end user.
  • the receiving side is an one-chip solution, providing key extractions, decryption, decoding and digital to analogue conversion. The only figure discloses schematically one embodiment of a complete system according to the present invention.
  • An input signal can enter the sending side in different analogue or digital formats. If the signal needs to be distorted in the system (i.e. not pre-distorted) it will enter a distortion unit 10 and will be distorted Under the control of a distortion key Kl coming from a key generator 14. The distortion can be viewed as a process for distorting the signal in such a way that it will be more or less recovered in the digital/analogue
  • the distortion unit 19 may also contain an analogue to digital converter (A/D) if the distortion unit supports analogue input. From (After) the distortion unit the distorted signal enters an encoder 11 for encoding (that encode the signal) according to current encoding standards such as MPEG.
  • the key generator 14 also generates pseudorandom keys K2 on a regular basis that will be used for encryption of the encoded signals in an encryptor 12.
  • the keys Kl and K2 and data for managing the access rights are then assembled into packets in the key generator 14.
  • the packet is encrypted with a key K3 that the user shares with a sender.
  • the packet is then inserted into the content data stream in the multiplexer 13 and thus sent to the user.
  • the receiving side receives the data stream that consists of encrypted content, access rights, the keys or any combination thereof. If the appropriate keys for decryption already exist in the key store 21, the keys Kl, K2 or K3 need not to follow the data stream. Pre-distribution of encrypted content for storage in the optional storage combined with later distribution of keys is also possible.
  • the data stream enter a de-multiplexer 16 part of a chip for eventually extracting the keys and access right packets and send them to the key decryptor 20.
  • the key decryptor (20) then decrypts the keys using an appropriate key that is stored in the chip.
  • the extracted key is then stored in a chip's key store 21 for later use as decryption key for key packets, access right packets or content.
  • the content less the keys and access rights packets is decrypted in a decryptor 17 using the appropriate key from the chip's key store 21. After decryption the decrypted content is decoded in a decoder 18 and sent to the digital to analogue converter 19.
  • the digital to analogue converter 19 is a special purpose unit that uses information from the key packet to remove the distortion added in the distortion unit 10 in the first transmitter stage (10). The purpose of this special digital to analogue converter 19 (D/A) is to make it difficult to make pirate-decoding devices even if the encryption scheme is broken.
  • the analogue output from the digital to analogue converter 19 is fed into the input/output part of the receiver.
  • the input/output part can be any signal from an audio card in a PC to an integrated amplifier in a Set-Top-Box for a video on demand application.
  • the system according to the present invention is not designed to use any particular encryption scheme and can use any algorithm that gives the necessary level of security. Since the receiver is implemented in a single chip unit and is designed to resist intrusion, the security will not be dependant of other parts of the system in which the chip is used.
  • a system is envisaged to enable secure distribution and storage of multimedia content in such way that only authorized users can have access to retrieve the content.
  • the transmission of the content to the user is digitalized but the integrated content decoding and conversion gives only analogue output and thereby prevents digital copying.
  • the distributed digital data are in the form of an encrypted combination of the digital content and added access control information.
  • the present invention further provides a possibility to distort the analogue signal to a certain degree.

Abstract

System comprising a sending side and a receiving side for secure distribution, storage and conditional retrieval of multimedia content, comprising a single chip solution for decrypting the content in a decryptor (17) by using an appropriate key in a chip's key store (21), decoding the decrypted content in a decoder (18), sending the decrypted and decoded content to a digital to analogue converter (19), the digital converter thereby using information from a key packet to remove the distortion added in a first sending stage (10), and feeding the analogue output from said digital to analogue converter (19) into an input/output part of a receiver to be presented.

Description

80972-SS
System for secure distribution, storage and conditional retrieval of multimedia content
The present invention is related to a system for securing distribution of multimedia information content, such as video and audio carried by any digital distribution system such as telephone systems, computer networks, television networks or video discs.
The distribution of multimedia content such as video and audio to the users has always been prone to illegal copying and piracy. Even the use of advanced encryption schemes together with the use of tamper resistant cryptographic devices such as smart cards have been broken with the result of illegal use and distribution of intellectual property.
Known digital multimedia distribution systems will if the encryption scheme is broken or keys are compromised, make the multimedia content available in the form of high quality audio, video or other output signals. Such systems may also have the high quality digital signals available in clear in the connections between components making it relatively easy to copy the digital high quality content.
With the system according to the present invention it is ensured that the content only is presented in an analogue format with a reduced quality, if the content should be copied or sampled to some other illegitimate storage device. Furthermore it is an object of the present invention to encrypt the multimedia content in such a way that, a digital decryption without the proper decrypting and decoding equipment, if the encryption scheme is broken or keys are compromised, will result in distorted audio, video or other analogue output.
Yet another object of the present invention is to enable a secure storage of content in a receiver, as to retain all authorization data for the distribution. This implies that if a user has been given a one week viewing authorization of a movie, the movie will not be viewable after that time even if it is stored on the receiver's disk at the beginning of the week.
The above objects are obtained with the system according to the present invention as defined by the features stated in the claims.
The system according to the present invention principally is divided in two parts, a sending side or transmitter, and a receiving side, a receiver. The sending side contains the necessary equipment to generate keys, distort the signal carrying the content, encrypt the signal, multiplex the keys and the encrypted signal and distribute the resulting encrypted digital output signal to the end user. The receiving side is an one-chip solution, providing key extractions, decryption, decoding and digital to analogue conversion. The only figure discloses schematically one embodiment of a complete system according to the present invention.
An input signal can enter the sending side in different analogue or digital formats. If the signal needs to be distorted in the system (i.e. not pre-distorted) it will enter a distortion unit 10 and will be distorted Under the control of a distortion key Kl coming from a key generator 14. The distortion can be viewed as a process for distorting the signal in such a way that it will be more or less recovered in the digital/analogue
(D/A) converter in a receiver 19. The distortion unit 19 may also contain an analogue to digital converter (A/D) if the distortion unit supports analogue input. From (After) the distortion unit the distorted signal enters an encoder 11 for encoding (that encode the signal) according to current encoding standards such as MPEG.
The key generator 14 also generates pseudorandom keys K2 on a regular basis that will be used for encryption of the encoded signals in an encryptor 12. The keys Kl and K2 and data for managing the access rights are then assembled into packets in the key generator 14. The packet is encrypted with a key K3 that the user shares with a sender. The packet is then inserted into the content data stream in the multiplexer 13 and thus sent to the user.
The receiving side receives the data stream that consists of encrypted content, access rights, the keys or any combination thereof. If the appropriate keys for decryption already exist in the key store 21, the keys Kl, K2 or K3 need not to follow the data stream. Pre-distribution of encrypted content for storage in the optional storage combined with later distribution of keys is also possible.
The data stream enter a de-multiplexer 16 part of a chip for eventually extracting the keys and access right packets and send them to the key decryptor 20. The key decryptor (20) then decrypts the keys using an appropriate key that is stored in the chip.
The extracted key is then stored in a chip's key store 21 for later use as decryption key for key packets, access right packets or content.
The content less the keys and access rights packets is decrypted in a decryptor 17 using the appropriate key from the chip's key store 21. After decryption the decrypted content is decoded in a decoder 18 and sent to the digital to analogue converter 19. The digital to analogue converter 19 is a special purpose unit that uses information from the key packet to remove the distortion added in the distortion unit 10 in the first transmitter stage (10). The purpose of this special digital to analogue converter 19 (D/A) is to make it difficult to make pirate-decoding devices even if the encryption scheme is broken. The analogue output from the digital to analogue converter 19 is fed into the input/output part of the receiver. Depending on the chosen chip the input/output part can be any signal from an audio card in a PC to an integrated amplifier in a Set-Top-Box for a video on demand application. The system according to the present invention is not designed to use any particular encryption scheme and can use any algorithm that gives the necessary level of security. Since the receiver is implemented in a single chip unit and is designed to resist intrusion, the security will not be dependant of other parts of the system in which the chip is used.
A system is envisaged to enable secure distribution and storage of multimedia content in such way that only authorized users can have access to retrieve the content. The transmission of the content to the user is digitalized but the integrated content decoding and conversion gives only analogue output and thereby prevents digital copying. The distributed digital data are in the form of an encrypted combination of the digital content and added access control information. The present invention further provides a possibility to distort the analogue signal to a certain degree.

Claims

80972-SSP a t e n t C l a i m s
1. System comprising a sending side and a receiving side for secure distribution, storage and conditional retrieval of multimedia content, characterized in a single chip solution for decrypting the content in a decryptor (17) by using an appropriate key in a chip's key store 21, decoding the decrypted content in a decoder (18), sending the decrypted and decoded content to a digital to analogue converter (19), the digital converter thereby using information from a key packet to remove the distortion added in a first sending stage (10), and feeding the analogue output from said digital to analogue converter (19) into a input/output part of a receiver to be presented.
2. System comprising a sending side and a receiving side for secure distribution, storage and conditional retrieval of multimedia content, characterized in the integration of analogue and digital security processing in a single chip.
PCT/NO2002/000367 2002-10-11 2002-10-11 System for secure distribution, storage and conditional retrieval of multimedia content WO2004034705A1 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
PCT/NO2002/000367 WO2004034705A1 (en) 2002-10-11 2002-10-11 System for secure distribution, storage and conditional retrieval of multimedia content
AU2002334448A AU2002334448A1 (en) 2002-10-11 2002-10-11 System for secure distribution, storage and conditional retrieval of multimedia content

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/NO2002/000367 WO2004034705A1 (en) 2002-10-11 2002-10-11 System for secure distribution, storage and conditional retrieval of multimedia content

Publications (1)

Publication Number Publication Date
WO2004034705A1 true WO2004034705A1 (en) 2004-04-22

Family

ID=32089868

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/NO2002/000367 WO2004034705A1 (en) 2002-10-11 2002-10-11 System for secure distribution, storage and conditional retrieval of multimedia content

Country Status (2)

Country Link
AU (1) AU2002334448A1 (en)
WO (1) WO2004034705A1 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR2911456A1 (en) * 2007-01-11 2008-07-18 Medialive Sa Digital data distributing method for e.g. DVD, involves converting digital data, presented in non audio-visual digital format, into audio-visual digital format using conversion device, and implementing protection device
US8171560B2 (en) 2008-04-07 2012-05-01 Microsoft Corporation Secure content pre-distribution to designated systems

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5208856A (en) * 1988-12-23 1993-05-04 Laboratoire Europeen De Recherches Electroniques Avancees Scrambling and unscrambling method for composite video signals and implementing device
EP0817485A1 (en) * 1996-06-28 1998-01-07 THOMSON multimedia Conditional access system and smartcard allowing such access
US5742680A (en) * 1995-11-13 1998-04-21 E Star, Inc. Set top box for receiving and decryption and descrambling a plurality of satellite television signals

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5208856A (en) * 1988-12-23 1993-05-04 Laboratoire Europeen De Recherches Electroniques Avancees Scrambling and unscrambling method for composite video signals and implementing device
US5742680A (en) * 1995-11-13 1998-04-21 E Star, Inc. Set top box for receiving and decryption and descrambling a plurality of satellite television signals
EP0817485A1 (en) * 1996-06-28 1998-01-07 THOMSON multimedia Conditional access system and smartcard allowing such access

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR2911456A1 (en) * 2007-01-11 2008-07-18 Medialive Sa Digital data distributing method for e.g. DVD, involves converting digital data, presented in non audio-visual digital format, into audio-visual digital format using conversion device, and implementing protection device
WO2008107528A2 (en) * 2007-01-11 2008-09-12 Medialive Method and system for the secured distribution of digital data
WO2008107528A3 (en) * 2007-01-11 2009-02-19 Medialive Method and system for the secured distribution of digital data
US20100146631A1 (en) * 2007-01-11 2010-06-10 Medialive Method and system for the secure distribution of digital data
US8171560B2 (en) 2008-04-07 2012-05-01 Microsoft Corporation Secure content pre-distribution to designated systems

Also Published As

Publication number Publication date
AU2002334448A1 (en) 2004-05-04

Similar Documents

Publication Publication Date Title
AU739300B2 (en) Steganographic techniques for securely delivering electronic digital rights management control information over insecure communication channels
US6898578B2 (en) Recording apparatus for recording digital information
US6985591B2 (en) Method and apparatus for distributing keys for decrypting and re-encrypting publicly distributed media
US6266415B1 (en) Process for protecting an information item transmitted from a security element to a decoder and protection system using such a process
JP4740198B2 (en) Method and apparatus for encrypting media programs for later purchase and viewing
KR101660065B1 (en) Method and apparatus for secure sharing of recorded copies of a multicast audiovisual program using scrambling and watermarking techiniques
CA2437018A1 (en) Selective encryption to enable multiple decryption keys
JP2000023137A (en) Broadcasting system and broadcasting transmitter- receiver
CN1343420A (en) Global copy protection system for digital home networks
JP3998178B2 (en) Content copyright protection device and program thereof
EP1440578B1 (en) Conditional access system and copy protection
JP4728754B2 (en) CONTENT TRANSMITTING DEVICE, CONTENT TRANSMITTING PROGRAM, CONTENT RECEIVING DEVICE, AND CONTENT RECEIVING PROGRAM
KR100820810B1 (en) Method for conditional access in digital receiver system
WO2004034705A1 (en) System for secure distribution, storage and conditional retrieval of multimedia content
EP3610652B1 (en) Receiving audio and/or video content
JP5557348B2 (en) Consumer electronics for receiving an input digital data stream of a digital signal of image and / or audio information
JP2004152014A (en) Contents transmitting method, contents transmitting device, contents transmitting program, contents receiving method, contents receiving device, and contents receiving program
KR20090045769A (en) Security device and method for conditional access system and set-top-box
KR100519549B1 (en) Method and device for managing cw(control word)
JP4542518B2 (en) Content usage control transmission device, content usage control reception device, content usage control system, content usage control transmission program, and content usage control reception program
KR100850946B1 (en) Apparatus and method for conditional access
JP4058167B2 (en) Storage type broadcast receiving apparatus, broadcast receiving method, transmitting apparatus, and transmitting method
KR20170092930A (en) Stored and streaming media contents access control system and its operation method
JPH10112851A (en) Method and device for transmitting or recording image information
WO2011064672A1 (en) Method for transfer of access criteria for multi-domain and trans-domain distribution of video and other media content

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ OM PH PL PT RO RU SD SE SG SI SK SL TJ TM TN TR TT TZ UA UG US UZ VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR IE IT LU MC NL PT SE SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
122 Ep: pct application non-entry in european phase
NENP Non-entry into the national phase

Ref country code: JP

WWW Wipo information: withdrawn in national office

Country of ref document: JP