Search Images Maps Play YouTube News Gmail Drive More »
Sign in
Screen reader users: click this link for accessible mode. Accessible mode has the same essential features but works better with your reader.

Patents

  1. Advanced Patent Search
Publication numberUS20140089964 A1
Publication typeApplication
Application numberUS 14/045,160
Publication date27 Mar 2014
Filing date3 Oct 2013
Priority date6 May 1998
Also published asUS8584255, US20070073945
Publication number045160, 14045160, US 2014/0089964 A1, US 2014/089964 A1, US 20140089964 A1, US 20140089964A1, US 2014089964 A1, US 2014089964A1, US-A1-20140089964, US-A1-2014089964, US2014/0089964A1, US2014/089964A1, US20140089964 A1, US20140089964A1, US2014089964 A1, US2014089964A1
InventorsRichard J. Barry, Adrian Charles Paskins
Original AssigneeSony United Kingdom Limited
Export CitationBiBTeX, EndNote, RefMan
External Links: USPTO, USPTO Assignment, Espacenet
Networked conditional access module
US 20140089964 A1
Abstract
A networked Conditional Access Module provided on an IEEE 1394 network, by defining a Conditional Access Module as a Conditional Access Subunit of the IEEE 1394 network, providing AV/C Conditional Access Commands to allow communication between the Conditional Access Subunit and other Subunits on the network, the Conditional Access Subunit including means to receive AV/C Conditional Access Commands over the IEEE 1394 network from another subunit, and means to transmit AV/C responses over the IEEE 1394 network in response to the received AV/C Conditional Access Commands.
Images(16)
Previous page
Next page
Claims(11)
1-28. (canceled)
29. A digital television signal receiver, comprising:
a tuner for receiving a scrambled digital television signal;
an interface for outputting said scrambled digital television signal to a conditional access subunit attachable to said receiver and for inputting a local scrambled digital television signal from said conditional access subunit;
a local descrambler for descrambling said locally scrambled digital television signal received from said conditional access subunit; and
a demultiplexer for receiving and demultiplexing said local descrambled digital television signal.
30. The digital television signal receiver according to claim 29, wherein said receiver is authenticated and allowed to locally descramble said local scrambled digital television signal only when it is descrambled that said receiver is authorized.
31. The digital television signal receiver according to claim 29, further comprising:
means for producing a partial transport stream wherein said interface outputs the partial transport stream to said conditional access subunit.
32. A conditional access subunit attachable to a digital television signal receiver, comprising:
an interface for inputting a scrambled digital television signal from said receiver;
a descrambler for descrambling said inputted scrambled digital television signal;
a local scrambler for locally scrambling said descrambled digital television signal and for outputting said locally scrambled digital television signal to said digital television signal receiver through said interface; and
an authenticator for authenticating said digital television signal receiver.
33. The conditional access subunit according to claim 32,
wherein said local scrambler scrambles said descrambled digital television signal and allows to output said locally scrambled digital television signal only when it is determined said receiver is authorized.
34. The conditional access subunit according to claim 32, wherein
said interface is further configured to input a partial transport stream from said digital television receiver, wherein said descrambler descrambles said partial transport stream.
35. A digital television signal receiving system, comprising:
a tuner for receiving a scrambled digital television signal;
an interface for outputting said scrambled digital television signal to a conditional access subunit attachable to a digital television receiver and for inputting a local scrambled digital television signal from said conditional access subunit;
a local descrambler for descrambling said locally scrambled digital television signal received from said conditional access subunit; and
a demultiplexer for receiving and demultiplexing said local descrambled digital television signal; and
a conditional access subunit attachable to said digital television receiver, comprising:
an interface for inputting a scrambled digital television signal from said receiver;
a descrambler for descrambling said inputted scrambled digital television signal;
a local scrambler for locally scrambling said descrambled digital television signal and for outputting said locally scrambled digital television signal to said digital television signal receiver through said interface; and
an authenticator for authenticating the digital television signal receiver.
36. A method of descrambling digital television signals, comprising the steps of:
receiving a scrambled digital television signal by a receiver;
outputting said received scrambled digital television, signal to a conditional access subunit attachable to said receiver;
descrambling said scrambled digital television signal by said conditional access subunit;
locally scrambling said descrambled digital television signal by said conditional access subunit;
outputting the locally scrambled digital television signal from said conditional access subunit to said receiver;
locally descrambling said locally scrambled digital television signal received from said conditional access sub-unit by said receiver; and
demultiplexing said locally descrambled digital television signal.
37. The method according to claim 36, further comprising:
authenticating the receiver; and
allowing the receiver to locally descramble said locally scrambled digital television signal only when it is determined that the receiver is authorized.
38. The method according to claim 37 further comprising steps of:
producing a partial transport stream by said receiver;
outputting said partial transport stream from said receiver to said conditional access subunit.
Description
  • [0001]
    The present invention relates to a networked conditional access module and methods of implementing such a module on a network. More particularly, it relates to the provision of a Conditional Access Subunit for an IEEE 1394 network.
  • [0002]
    With the development of digital multimedia and in particular digital television, it has been proposed to provide a conditional access module. In the field of digital video processing, it is known to code digital video signals such that special processing is needed in the receiver to be able to reproduce the video signals. In particular, it has been proposed to provide a conditional access module which can perform all of the descrambling and other conditional access functions of the digital TV receiver. This allows conditional access and signal decoding functions to be separated from host receiver, such that a generic digital TV receiver can operate with many different conditional access systems in different conditional access modules.
  • [0003]
    To allow communication between a conditional access module and a digital TV receiver, a common interface has been proposed and standardized by CENELEC (EN50221 Common Interface Specification for Conditional Access and other Digital Video Broadcasting Decoder Applications). This standard Common Interface defines a transport stream interface in which various virtual channels are time multiplexed and a command interface over which various additional command data are sent. The common interface thus allows connection of a conditional access module to a digital TV receiver or indeed any other digital video device.
  • [0004]
    As a basis for the present invention, it is now recognised that it would be advantageous to provide a conditional access module on a local network of digital multi-media devices including audio and video devices, such that the various functions available in the conditional access module could be provided to all of the devices on the network.
  • [0005]
    A standard has been proposed for connecting together various digital video devices on a local network. In particular, IEEE 1394-1995 is an IEEE standard for a high performance serial bus. It defines a bus, which will be referred to as an IEEE 1394 serial bus, for connecting together various digital consumer audio/visual products.
  • [0006]
    The IEEE 1394 specification defines a physical link connector, electrical signaling and a set of link and transaction protocols allowing the serial bus to self configure and carry audio, video and control information efficiently. A further set of additional protocols have also been defined to carry MPEG data and provide control mechanisms between different items of equipment on the IEEE 1394 serial bus. These protocols are defined in the specification “Digital Interface for Consumer Electronic Audio/Video Equipment” (IEC61883).
  • [0007]
    The IEC61883 specification enables several command protocols to be used. One set of commands are known as audio/video control-command transactions (AV/C-CTS) and are specified in the AV/C Digital Interface Command Set Document development by the IEEE 1394 Trade Association (see AV/C Digital Interface Command Set Version 2.0D Mar. 26, 1997 Audio/Video Working Group of the 1394 Trade Association). The AV/C CTS defines a command set for consumer and professional audio/visual equipment. The AV/C CTS commands are cared within the FCP (Function Control Protocol) packet format defined by IEC61883.
  • [0008]
    An object of the preset invention is to provide means by which a conditional access module may be provided on an IEEE 1394 network.
  • [0009]
    According to the present invention, there is provided a method of providing a Conditional Access Module on an IEEE 1394 network, the method comprising:
  • [0010]
    defining a Conditional Access Module as a Conditional Access Subunit of the IEEE 1394 network;
  • [0011]
    providing AV/C Conditional Access Commands to allow communication between the Conditional Access Submit and other subunits on the network.
  • [0012]
    According to the present invention, there is provided a conditional access subunit for connection to an IEEE 1394 network, the subunit including:
  • [0013]
    means to receive AV/C Conditional Access Commands over the IEEE 1394 network from another subunit; and
  • [0014]
    means to transmit AV/C responses over the IEEE 1394 network in response to the received AV/C Conditional Access Commands.
  • [0015]
    According to the present invention, there is provided a subunit for use with a conditional access subunit on an IEEE 1394 network, the subunit including:
  • [0016]
    means to transmit AV/C Conditional Access Commands over the IEEE 1394 network to the conditional access subunit; and
  • [0017]
    means to receive AV/C responses from the conditional access subunit over the IEEE 1394 network in response to the transmitted AV/C Conditional Access Commands.
  • [0018]
    In this way, by treating the conditional access module as a subunit of the IEEE 1394 network and by providing conditional access commands as part of the AV/C command set, a conditional access module can be fully integrated on the network.
  • [0019]
    Preferably, the conditional access command includes a CA enable command and/or a CA entitlement command. The AV/C conditional access commands may also include a security command.
  • [0020]
    In this way, the CA enable command can be used to instruct the CA subunit as to which service is should descramble.
  • [0021]
    The enable command may include control commands as well as status and notify commands.
  • [0022]
    The CA entitlement commands may be used to interrogate the conditional access subunit to determine what entitlement the user has to services. It may be a status or notify type command.
  • [0023]
    According to the present invention, there is also provided a conditional access subunit for connection to an IEEE 1394 network for use in descrambling a transport stream received over the network wherein the conditional access subunit, having descrambled the transport stream, introduces a local scrambling before retransmitting the transport stream to other subunits on the network, such that only authorised subunits on the network capable of local descrambling can receive the information in the transport stream.
  • [0024]
    In this way, once a conditional access subunit has descrambled a program, the program does not become available for unauthorised copying. It can be transported only to an authorised subunit on the network, for instance a television display. This system can also be used to ensure that a particular conditional access subunit can only be used in conjunction with other particular types of subunit with the same local descrambling capabilities.
  • [0025]
    According to the present invention there is also provided a conditional access subunit for connection to an IEEE 1394 network having a tuner subunit, the conditional access subunit having means for periodically contacting the tuner subunit to request the received transport stream for a period of time sufficient to allow the conditional access subunit to update the entitlement management messages stored in the conditional access subunit.
  • [0026]
    In this way, even if a user does not operate the conditional access until for some time, such that entitlement information would have otherwise bee missed, the conditional access subunit automatically requests transport stream information periodically so as to obtain that entitlement information.
  • [0027]
    The present invention will be more clearly understood from the following description, given by way of example only, with reference to the accompanying drawings, in which:
  • [0028]
    FIG. 1 illustrates a CA subunit;
  • [0029]
    FIG. 2 illustrates CA subunit logic connections;
  • [0030]
    FIG. 3 illustrates a CA subunit identifier descriptor;
  • [0031]
    FIG. 4 illustrates a system specification for use with the descriptor of FIG. 3;
  • [0032]
    FIG. 5( a) illustrates a CA status descriptor;
  • [0033]
    FIG. 5( b) illustrates a CA subunit status area info block;
  • [0034]
    FIG. 5( c) illustrates a source plug status area info block;
  • [0035]
    FIG. 5( d) illustrates a plug status info block;
  • [0036]
    FIG. 6 illustrates CA subunit commands;
  • [0037]
    FIG. 7( a) illustrates a CA enable control command;
  • [0038]
    FIG. 7( b) illustrates the broadcast system specific data of FIG. 7( a);
  • [0039]
    FIG. 7( c) illustrates an elementary PI) definition of FIG. 7( b);
  • [0040]
    FIG. 8( a) illustrates a CA enable response;
  • [0041]
    FIG. 8( b) illustrates the broadcast system specific data of FIG. 8( a);
  • [0042]
    FIG. 9 illustrates status or notify command structure;
  • [0043]
    FIG. 10 illustrates status or notify response structure;
  • [0044]
    FIG. 11( a) illustrates a CA entitlement command;
  • [0045]
    FIG. 11( b) illustrates the broadcast system specific data of FIG. 1( a);
  • [0046]
    FIG. 12( a) illustrates a CA entitlement response;
  • [0047]
    FIG. 12( b) illustrates the broadcast system specific data of FIG. 12( a);
  • [0048]
    FIG. 13 illustrates a security control command;
  • [0049]
    FIG. 14 illustrates command exchange between controller and CA subunit; and
  • [0050]
    FIG. 15 illustrates a satellite IRD connected to a network conditional access module.
  • [0051]
    A requirement exists for a Conditional Access (CA) system that allows the manufacturer of a Digital Television Receiver (DTV) to access scrambled services from several broadcasters. This is achieved by defining a protocol that allows the CA system to reside on a module which can then be connected to the DTV allowing that DTV to access the service. A solution exists in the form of a PC Card connected to a single receiver. However there exists a new requirement for a Networked Conditional Access Module (NCAM). The main requirements for this device are:—
      • flexible form factor
      • flexible access, for example peer to peer communication
      • flexible location
  • [0055]
    This application proposes the format of the additional AV/C subunits that are required to implement the NCAM. The AV/C model for the NCAM will provide a conditional access system that is tailored for use on an IEEE 1394-1995 based digital network.
  • [0056]
    The purpose of the Networked Conditional Access Module (NCAM) is to provide conditional access functionality. The NCAM uses a logical collection of resources that allow the descrambling of selected services to take place. The required resources for the NCAM can exist either in one location, for example inside a DTV, or be distributed throughout the in Home Digital Network (IHDN).
  • [0057]
    The NCAM relies on both existing and additional subunits. The existing subunits that the NCAM makes use of are:—
      • Tuner subunit
      • Panel subunit
  • [0060]
    In order to implement a networked conditional access module an IEEE 1394 network, an AV/C subunit is defined for the conditional access module. In particular a conditional access subunit models the core functionality of a descrambler. The CA subunit receives scrambled streams, descrambles them and then outputs a descrambled stream. The CA subunit may communicate with other required subunits via asynchronous commands across the IEEE 1394 network.
  • [0061]
    The Tuner subunit is used the data source, the Panel subunit is used to provide information to the user and receive input from the user. The CA subunit contains the descrambling functionality and can make use of smart card and modern subunits.
  • [0062]
    The resources that are required for an NCAM to function may be implemented privately within a single module. If a manufacturer wishes to develop an NCAM with the smart card and modem functionality integrated for the exclusive use of the NCAM this is allowed. In such a case the NCAM would only implement the CA subunit and make use of the tuner and panel subunits in other devices. It is likely for security reasons that an NCAM would be implemented with a private smart card. The smart card subunit is included for when a smart card could be used for other applications, for example a data card or “electronic cash” card.
  • [0063]
    The NCAM can also be implemented with distributed resources. In this case the CA subunit would work in conjunction with subunits embedded in other objects distributed throughout the digital network.
  • [0064]
    Depending on the service to be descrambled, all or some of the resources will be required. In a simple system that relies on a Smart Card to be inserted to authenticate the service the modem is not required, a simple form of display device is required to prompt the user to insert the card but interaction is not necessary. A more complicated system, for example a pay per view (PPV) system, requires all of the resources to allow a choice of services to be presented to the user and to allow the user make a selection. Therefore the NCAM may operate with reduced functionality if not all the required subunits are present.
  • [0065]
    FIG. 1 illustrates the basic CA subunit 2. This can be a stand alone device or integrated into another device.
  • [0066]
    The CA subunit destination plug 4 is the input to the subunit 2. The signal format is compliant with the system(s) supported by the CA mechanism. The CA subunit destination plug 4 can connect either directly to the serial bus (1394) input plug or to the source plug of another suitable subunit for example the input to the CA subunit could be a tuner subunit.
  • [0067]
    The CA subunit source plug 6 is the output of the subunit 2. The signal format is compliant with the system(s) supported by the CA mechanism. The CA subunit source plug 6 can connect either directly to the serial bus output plug or to the destination plug of another suitable subunit.
  • [0068]
    A CA subunit that implements a single source and destination plug is potentially capable of descrambling one or more services within an isochronous channel from a single source, providing the CA system is compatible with the source material.
  • [0069]
    Depending on the hardware capability of the CA suburit it is possible to implement multiple destination and source plugs. There are an equal number of source and destination plugs. Such a configuration allows a single CA subunit to provide descrambling of several independent streams/services at the same time. This model allows a very flexible, distributed AV network environment.
  • [0070]
    Thus, in other words, the CA subunit can receive different streams from one or more other subunits on the network, descramble them and re-route them to one or more other subunits as required. Any limitation is due principally only to bandwidth.
  • [0071]
    When making connections between the CA subunit destination plug and either the serial bus input or another subunit the connection is established manually using a CONNECT command. This connection is made before issuing a CA command. If the CA subunit is operating in a stand-alone mode then the destination and source plugs of the subunit can be permanently connected to the input and output serial bus plugs.
  • [0072]
    If the CA subunit has an existing connection which has been locked and an additional connection is requested then a response of REJECTED is returned. If the connection is permanent then the conflicting command generates a response of NOT IMPLEMENTED.
  • [0073]
    The CONNECT command is used to connect the CA subunit source plugs to either another subunit or the serial bus output plugs.
  • [0074]
    All current connections of CA subunits are reported by the CONNECT stains or CONNECTIONS status commands. This includes all permanent connections. A controller can determine if a connection is permanent by examining the “perm” flag of the responses for the CONNECT status and CONNECTIONS status commands.
  • [0075]
    The connection of the CA subunit to other subunits is implementation specific. Whether it is logical to allow the connection of the CA subunit to certain other subunits is considered at implementation time.
  • [0076]
    A CA subunit may be embodied inside a receiver, which is a device defined as one that contains a tuner subunit, or as a stand-alone device. FIG. 2 illustrates how a CA subunit appears in a receiver 8; in a stand-alone device, there would likely be no antenna input plug (only 1394 serial bus and possibly “external” input plugs).
  • [0077]
    The following table illustrates the various combinations of connections between a receiver unit and a CA subunit plugs and which ones are valid or not. All invalid connections generate a response of NOT IMPLEMENTED.
  • [0000]
    Con-
    Non CA nection
    Subunit Plug CA Subunit Plug Valid ? Comments
    External antenna CA destination NO X
    input plug plug
    External antenna CA source plug NO X
    input plug
    External input plug CA destination NO X
    plug
    External input plug CA source plug NO X
    External output plug CA destination NO X
    plug
    External output plug CA source plug NO X
    Serial bus input CA destination YES This connection must
    plug plug be created using a
    CONNECT command,
    or it may be a
    permanent connection
    Serial bus input plug CA source plug NO X
    Serial bus output CA destination NO X
    plugs plug
    Serial bus output CA source plug YES This connection must
    plugs be created using a
    CONNECT command,
    or it may be a
    permanent connection
    Subunit source plug CA destination YES This connection must
    plug be created using a
    CONNECT command,
    or it may be a
    permanent connection
    Subunit source plug CA source plug NO X
    Subunit destination CA destination NO X
    plug plug
    Subunit destination CA source plug YES This connection must
    plug be created using a
    CONNECT command,
    or it may be a
    permanent connection
  • [0078]
    When issuing the CONNECT Command the lock bit is used to ensure that connections are not broken by third parties.
  • [0079]
    The CA subunit can handle both full and partial transport streams. It is beneficial for the source to create a partial transport stream containing the element of the service it wishes descrambled in order to save bandwidth on the bus. In the case where a partial transport stream is created and the EMMS (Entitlement Management Message) are embedded in the transport stream, the source includes the EMMs in the partial transport stream. It will not be possible for the CA subunit to descramble the desired services if the data contained lathe EMMs is not present.
  • [0080]
    The CA system is used to prevent unauthorised access to broadcast material Once the material has been descrambled, it can be protected when carried over the IHDN (In Home Digital Network). In particular, the CA subunit can implement a suitable Copy Protection system on both its destination and source plugs.
  • [0081]
    The CA subunit is provided with a subunit identifier. For each particular CA subunit, the subunit identifier describes the characteristics of the broadcast system(s) and CA system(s) supported by that CA subunit. More than one broadcasting system and CA system may be supported by a particular CA subunit. With the use of this information, other subunits on the network, particularly, the controller, will know how each CA subunit may be used.
  • [0082]
    FIG. 3 illustrates the subunit dependent information which is contained within the subunit identifier descriptor.
  • [0083]
    The CA_subunit_dependent_info_fields_length field specifies the number of bytes for the non-info block fields of the subunit dependent information; in this case, through the system_specification[n−1].
  • [0084]
    A controller on the network preferably finds any number of information blocks following this field, such that the CA subunit dependent information can be extended in the future. Controllers can easily determine if any info blocks exist here by comparing the CA_subunit_dependent_length and CA_subunit_dependent_info_fields_length fields. If the following formula is true:
  • [0085]
    CA_subunit_dependent_length>(CA_subunit_dependent_info_fields_length+2) then info blocks exist in this structure.
  • [0086]
    The CA_subunit_version field indicates the version number of CA subunit command specification that the CA subunit conforms to. The upper 4 bits show the major version number and the lower 4 bits the minor version number.
  • [0000]
    CA_subunit_version meaning
    1016 Version 1.0 of the CA subunit specification
    all others Reserved for future specification
  • [0087]
    The number_of_systems field specifies how many broadcast systems are supported by this CA subunit.
  • [0088]
    The system_specification field describes each broadcast system and is illustrated in FIG. 4.
  • [0089]
    The specification_length field indicates the size, in bytes of the entire system_specification structure.
  • [0090]
    The system_id field indicates a broadcast system that the CA subunit supports. The following broadcast systems are currently defined;
  • [0000]
    system_id name
    2016 DVB
    other values reserved
  • [0091]
    The implementation_profile_id field specifies the profile ID of the CA subunit for this system_id. A CA subunit may be implemented with a different profile for each of the broadcast systems that it supports. There is one profile for each supported system.
  • [0000]
    The following profiles are defined:
  • [0000]
    implementation_profile_id meaning
    E016 conformant_implementation - a CA subunit
    with this implementation profile ID was
    created based on the AV/C CA Specification
    version 1.0. The set of features (commands
    and data structures) supported by this
    implementation is defined by the
    manufacturer. This profile ID applies to
    all broadcast systems.
    E116 conformant_full_implementation - a CA
    subunit with this profile implementation
    is as described above, but it implements
    all of the commands and relevant data
    structures for the specified broadcast
    system, as defined in the AV/C CA
    Specification version 1.0. This profile
    ID applies to all broadcast systems.
    All other values reserved for future specification in this
    AV/C CA Specification
  • [0092]
    The number_of_CA_system_ids field indicates the number of CA systems the CA subunit is compatible with.
  • [0093]
    The CA_system_id fields identify a particular CA system. The values for CA_system_id are systemic dependent and in the DVB case they are defined in pr ETS 300468 Specification for Service Information (SI) in Digital Video Broadcasting (DVB) Systems. The CA_system_id_length field defines the length in bytes of the CA_system_id field.
  • [0094]
    For each CA subunit, there is also a CA status descriptor. This holds information about the CA subunit in general, and about the information that is on each of its source plugs. The data held within this structure is dynamic and is kept up to date by the CA subunit. A controller may examine this structure in order to determine the operational status of the CA subunit end its source plugs.
  • [0095]
    The general format of the CA status descriptor is shown in FIG. 5( a).
  • [0096]
    The descriptor_length is the number of bytes for the CA subunit status descriptor structure, not including the descriptor_length field.
  • [0097]
    The CA subunit status area info block is illustrated separately in FIG. 5( b) and the source plug status area info block is illustrated separately in FIG. 5( c).
  • [0098]
    The general CA subunit status area info block contains status information about the CA subunit that is not specific to a particular destination or source plug.
  • [0099]
    The compound_length field specifies the number of bytes for the remainder of this information block (including any nested information blocks which may occur after the last well defined field).
  • [0100]
    The primary_field_length is the number of bytes for the remaining fields.
  • [0101]
    The available_bandwidth_upper_and available_bandwidth_lower fields are read together and indicate the bandwidth capacity the CA subunit has available. The available_bandwidth_upper field indicates the integer amount of bandwidth available in Mbps. The available_bandwidth_lower indicates the fractional amount of bandwidth available in Mbps.
  • [0102]
    For example, if the CA subunit has 34.8 Mbps of bandwidth available it would be represented as follows.
  • [0103]
    available_bandwidth_upper=00 2216
  • [0104]
    available_bandwidth_lower=0816
  • [0105]
    The values of 0F FF16 for available_bandwidth_upper and FF16 for available_bandwidth_lower are reserved and indicate that the CA Subunit cannot determine the amount of available bandwidth.
  • [0106]
    This allows a device such as a tuner subunit to determine whether the CA subunit has enough spare capacity for additional services to be descrambled. If the CA subunit can support the simultaneous descrambling of multiple services from multiple sources then the available_bandwidth can be read in conjunction with the destination_plug_status fields to allow a controller to determine whether it is able to connect an additional source to the CA subunit.
  • [0107]
    With respect to the source plug status area info block of FIG. 5( c), the number of source plugs field specifies the number of source plugs on the particular subunit and, hence, the number of plug status info block structures that are nested in this info block. The structures are located sequentially and not nested inside of each other. Most CA units will have only one source plug.
  • [0108]
    The plug status info block (x) fields are illustrated separately in FIG. 5( d) and provide status information for each of the source plugs. There is one of the structures for each source plug on the CA subunit, even if the plug currently has no status information to report. As shown the fields are each split into two general areas.
  • [0109]
    The source_plug field indicates the actual source plug numbers.
  • [0110]
    The destination_plug field indicates the destination_plug number that this source_plug is relevant to.
  • [0111]
    The status field describes the current situation of the source_plug according to the table below.
  • [0000]
    value status description
    0016 No information instances are on the specified source plug.
    1016 A descrambled version of the service(s) requested for
    descrambling is(are) currently on the specified source plug.
    2016 A descrambled version of the service(s) requested should be on
    the specified source plug, however it is (they are) not currently
    on the plug.
  • [0112]
    Case 1016 is used when the CA subunit is functioning correctly and is outputting the requested service in a descrambled state. Case 2016 is used when the CA subunit has responded that it can descramble the selected service but at present the descrambled service is not available on the plug.
  • [0113]
    The CA subunit Status descriptor is specific to the CA subunit type; it has the following type value.
  • [0000]
    descriptor_type meaning
    8016 CA Status Descriptor
  • [0114]
    The descriptor_type_specific_reference field does not exist because there is only one CA status descriptor for a CA subunit.
  • [0115]
    The CA subunit model does not feature any object lists.
  • [0116]
    The CA subunit commands are illustrated in FIG. 6.
  • CA Enable
  • [0117]
    The CA enable command is used to instruct the CA subunit as to which service it should descramble. The command is broadcast specific. The CA enable control command is illustrated in FIG. 7( a) with the broadcast systems specific data illustrated in FIG. 7( b) and the elementary PID definition illustrated in FIG. 7( c).
  • [0118]
    The system_id field denotes which broadcast system the following command relates to. The following systems are currently defined:
  • [0000]
    system_id name
    2016 DVB
    Other values reserved
  • [0119]
    The broadcast_system_specific_data field contains operands that are specific to the system being used.
  • [0120]
    For the DVB System the operands of FIG. 7( b) fully specify the service to be descrambled. The PID (Packet Identifier) for each component of the service is identified.
  • [0121]
    If one of the component subunits of a controller is a tuner subunit than the controller has the service_id and PID values available to it privately. However, if a controller wishes to make use of another suitable receiving device then the controller must inspect the service and component descriptors of the tuner subunit in the receiving device. The controller must define the PIDs of the components of the desired service.
  • [0122]
    A separate CA_ENABLE command is sent for each service that is to be descrambled. The action field is used to update the list of selected services stored in the CA subunit. The following values are defined
  • [0000]
    action value
    add 0016
    update 1016
    remove 2016
    remove_all 3016
    reserved Other values
  • [0123]
    When action is set to “add” the selected service is added to the list of services selected for descrambling. “update” indicates that a selected service should be modified in some way. Since the list management commands only act at the program level, any changes at the elementary stream level in an existing service must be signalled by an ‘update’ command with the complete elementary stream list re-sent. “remove” allows one service to be deleted from the list. “remove_all” is used when the descrambling of all services is no longer required.
  • [0124]
    The service_id field specifies the service to which the program_map_PID is applicable.
  • [0125]
    The number_of_elementary_PID_definitions field indicates the member of following elementary_PID fields.
  • [0126]
    Each of the elementary PID fields correspond to the example illustrated in FIG. 7( c).
  • [0127]
    The stream_type field identifies the type of service element carried within the packets with the PID whose value is specified by the elementary_PID. The values are defined in table 2-29 of ISP/IEC 13818-1 Genetic Coding of Moving Picture and Associated Audio Systems.
  • [0128]
    The elementary_PID field specifies the PD of the transport stream packets that carry the associated service element.
  • [0129]
    Having received a CA able control command, the CA subunit will produce a response as illustrated in FIG. 8( a), with the broadcast systems a specific data illustrated in FIG. 8( b).
  • [0130]
    The operands have the same meaning as for the CA enable control command and the response format is the same as for the control command with the addition of the status operand.
  • [0131]
    In the case where the action is “add” or “update” and the CA enable command is successful, the response will be ACCEPTED, status can take on the following values. The value of status reflects the action.
  • [0000]
    action status Value
    add descrambling 0016
    add descrambling possible under 0116
    conditions (purchase dialog)
    add descrambling possible under 0216
    conditions (technical dialog)
    update descrambling 1016
    update descrambling possible under 1116
    conditions (purchase dialog)
    update descrambling possible under 1216
    conditions (technical dialog)
    remove remove_successful 2016
    remove_all remove_successful 3016
  • [0132]
    In the case where an add or update command is successful then the response is scrambling. However there may be some eases where it is theoretically possible to descramble the service but there are certain conditions that must first be satisfied. The scrambling possible under conditions messages are returned in this case. There are two types of conditional responses, purchase dialogue and technical dialog. Both dialogs require an interaction with the user via the man machine interface (MMI).
  • [0133]
    The purchase dialog is required, for example, where the user has requested a pay per view service. Here a dialog with the user might be required to confirm the cost of the service before viewing can commence.
  • [0134]
    The technical dialog is required when there is a technical issue to overcome before the CA subunit can determine whether it is possible or not to descramble the service. This could occur, for example, when the user needs to insert the smart card.
  • [0135]
    In the case where the CA_ENABLE command is unsuccessful the response frame will use the response code of REJECTED. The status field will take on the following values to reflect the nature of the error. The value of status reflects the action.
  • [0000]
    action status Value
    add descrambling not possible 8016
    add descrambling not possible 8116
    (because no entitlement)
    add descrambling not possible 8216
    (for technical reasons)
    add descrambling not possible 8316
    (Insufficient bandwidth in CA subunit)
    add descrambling not possible 8416
    (Incompatible CA system)
    update descrambling not possible 9016
    update descrambling not possible 9116
    (because no entitlement)
    update descrambling not possible 9216
    (for technical reasons)
    update descrambling not possible 9316
    (Insufficient bandwidth in CA subunit)
    update descrambling not possible 9416
    (Incompatible CA system)
    remove remove failed -service not present A016
    remove remove failed - unknown reason A116
    remove_all remove failed - service not present B016
    remove_all remove failed - unknown reason B116
  • [0136]
    The CA enable command can also be seat with a ctype of STATUS and NOTIFY. These are signified by “S” and “N” in FIG. 6. The status and notify command frames have the same form as the control command. The command is used to determine whether the CA subunit is capable of descrambling the selected service. The broadcast system specific data for DVB systems specific operand is illustrated in FIG. 9. The fields are the same as for the control command.
  • [0137]
    In response to a CA enable status and notify command, the CA subunit makes a response. The broadcast system specific data for the DVB system specific operands is illustrated in FIG. 10.
  • [0138]
    The fields are the same as for the COMMAND response with the exception of the status field, which can take the values defined below. The “remove” action is not valid for STATUS or NOTIFY commands.
  • [0000]
    action status Value
    add descrambling will be possible 0016
    add descrambling will be possible under 0116
    conditions (purchase dialog)
    add descrambling will be possible under 0216
    conditions (technical dialog)
    update descrambling will be possible 1016
    update descrambling will be possible under 1116
    conditions (purchase dialog)
    update descrambling will be possible under 1216
    conditions (technical dialog)
    add descrambling will not be possible 8016
    add descrambling will not be possible 8116
    (because no entitlement)
    add descrambling will not be possible 8216
    (for technical reasons)
    add descrambling will not be possible 8316
    (Insufficient bandwidth in CA subunit)
    add descrambling will not be possible 8416
    (Incompatible CA system)
    update descrambling will not be possible 9016
    update descrambling will not be possible 9116
    (because no entitlement)
    update descrambling will not be possible 9216
    (for technical reasons)
    update descrambling will not be possible 9316
    (Insufficient bandwidth in CA subunit)
    update descrambling will not be possible 9416
    (Incompatible CA system)
  • CA Entitlement
  • [0139]
    The CA entitlement command may be used by EPG (Electronic Program Guide) applications to interrogate the CA subunit in order to determine what entitlement the user has to services found in the electronic program guide. For instance, when displaying the EPG, having interrogated the CA subunit to determine what programs can be descrambled, the EPG can indicate which of the programs the user is able to view. The command can be used with a ctype of STATUS and NOTIFY. This command does not prevent EPG and CA application from the same or cooperating suppliers to develop private means of passing entitlement information. This command can be used by independent EPGs to interrogate CA modules.
  • [0140]
    The CA entitlement command is illustrated in FIG. 11( a) with the broadcast systems specific data for the DVB system being illustrated in FIG. 11( b).
  • [0141]
    The system ID field has the same meaning as for the CA enable command.
  • [0142]
    The operands network ID, original network ID, transport stream ID, service ID and event ID specify the service that the entitlement query is for. The event ID is fully qualified by the other location-identifiers in the service information.
  • [0143]
    In response to a CA entitlement command, the CA subunit issues a response illustrated by FIG. 12( a) with the broadcast system specific data for the DVB system illustrated in FIG. 12( b).
  • [0144]
    The operands network_id, original_network_id, transport_stream_id, service_id and event_id are the same as for the command. The entitlement_status field denotes the whether or not the user has entitlement to the selected service.
  • [0000]
    value entitlement_status Description
    00 entitlement The CA subunit cannot determine the
    unknown entitlement status for this service
    01 entitlement Entitlement for this service is
    available currently available
    02 entitlement not Entitlement for this event is not
    available currently available and cannot be
    made available by any user dialogue
    with the CA subunit
    03 user dialogue Entitlement is not currently
    required available but could be made
    available after a user dialogue
    with the CA subunit
    04 user dialogue The user dialogue is complete the
    complete unknown entitlement is unknown
    05 user dialogue The user dialogue is complete and
    complete available entitlement has been granted
    06 user dialogue The user dialogue is complete and
    complete not entitlement has not been granted
    available
    other reserved The remaining values are reserved
    values for future use
  • Security
  • [0145]
    Although the concept of the CA Subunit is to allow generic receiver to work with multiple CA systems there may be some cases when a service provider will wish to associate a certain CA Subunit with a certain IRD (Integrated Receiver Decoder). In this case authentication is used between the CA Subunit and the IRD to ensure that each device only works with its respective partner.
  • [0146]
    The SECURITY command is illustrated in FIG. 13 and is independent of broadcast system as it is uniquely defined for each application. The authentication protocol is a process whereby the IRD and CA Subunit pass between themselves control codes to allow each device to satisfy itself that the other is genuine. The authentication protocol could be as simple as transferring two known keys between the devices or a more complex key exchange based upon, for example public key protocols.
  • [0147]
    The category field defines the authentication and key exchange protocol that is used in the following category dependant field.
  • Implementation
  • [0148]
    The following provides, an explanation as to how the CA Subunit can be implemented and the procedure that can be followed to make use of the CA Subunit.
  • [0149]
    The NCAM is a logical collection of subunits that provide the required functionality to implement a networked conditional access system. The CA subunit is the core of the system and relies or other subunits to provide a source and sink for the material that requires descrambling and communication with both the user and outside world. As such the CA subunit should be aware of the tuner subunit and panel subunit.
  • [0150]
    The NCAM can be implemented with only the tuner, CA and Panel subunits; these are the minim requirements. The resources that the CA system may also require such as a modem and/or smart card reader can be implemented and accessed privately when they form part of the same unit.
  • [0151]
    The procedure for decoding a scrambled transport stream is described with reference to FIG. 14. The following assumes that the tuner subunit will be the source of the scrambled stream, either an off air signal via a suitable front end or directly from the demux via an alternative source such as a DVCR. The user will a make a channel selection and the tuner subunit will detect that the stream is scrambled.
  • [0152]
    The controller can make an intelligent prediction as to which CA subunit to use based upon the CA_system_id field from the transport stream and CA_system_id of the CA subunit. For example in FIG. 15 satellite IRD is connected to a CA Subunit via 1394.
  • [0153]
    The controller establishes an isochronous channel between the tuner and CA subunits to transmit the scrambled service to the CA subunit. A second channel from the CA subunit to the desired sink, this can be the unit that originates the scrambled source material or a separate unit, is set up. The 5C Copy Protection system or any other suitable alternative copy protection mechanism can be used to protect the descrambled transport stream from unauthorised copying.
  • [0154]
    The controller then sends the CA_ENABLE command to inform the CA subunit of which service or services it would like descrambled. When the CA subunit receives the CA_ENABLE command it determines whether or not it is capable of descrambling the selected service. This may involve setting up a dialogue with the user to determine whether they are prepared to pay for the service or request them to insert their bank card or pin number. Some communication with the outside world via the modem may be required.
  • [0155]
    If following the user dialogue the CA subunit is capable of descrambling the selected services it updates its internal status registers and starts output the descrambled data.
  • [0156]
    Due to the nature of AV/C commands whereby each command requires a response, if the original CA_ENABLE command is met with a REJECTED response due to a user or technical dialogue being required then once the dialogue is resolved the controller will not know the outcome. Therefore if a CA_ENABLE command is rejected for dialogue reasons then the controller should send a NOTIFY command to be informed when the state of the CA subunit changes.
  • EMM Handling
  • [0157]
    In some implementations of a DTV receiver the CA module can receive EMMs whilst the DTV is in standby and on power states. This allows the CA module to continually update the entitlements that the user has.
  • [0158]
    In a network environment the TS must be routed to the CA subunit to allow the subunit to process the EMM packets. This means that if the CA subunit remains powered off or a TS is not connected to it for a period of time then the enticement stored in the CA subunit may become out of date. Therefore at periodic intervals the CA subunit should contact the tuner subunit and request the TS for a period of time to allow it to update the EMMs. This should be done at times when the user experience will not be compromised. The controller should ensure that the channel is not changed while the user is watching a particular service.
  • No Tuner Subunit
  • [0159]
    The benefit of using a CA subunit in a network where a tuner subunit also exists comes when the controller is external to both the unit that contains the tuner subunit and the unit that contains the CA subunit. This allows the controller to discover the services that the tuner subunit is capable of receiving and can instruct the CA subunit to descramble a number of these services.
  • [0160]
    In some cases the CA subunit will exist in a network where there is no tuner subunit. In this case in order for a device to make use of the CA subunit the controller must exist in the same unit as that of the signal source. The controller must be capable of privately inspecting the transport stream and determining the PIDs of the elements of the service it wishes descrambled. Again the EMM stream must be included with the PIDs of the elements that to be descrambled.
Patent Citations
Cited PatentFiling datePublication dateApplicantTitle
US4802215 *2 Jul 198431 Jan 1989Independent Broadcasting AuthoritySecurity system for television signal encryption
US4908834 *22 Sep 198713 Mar 1990Wiedemer John DHigh security pay television system
US4937866 *29 Jul 198726 Jun 1990U.S. Philips CorporationSystem for decoding transmitted scrambled signals
US4947428 *12 May 19897 Aug 1990Etat Francais, Represente Par Le Ministere Des Postes, Des Telecommunications Et De L'espace (C.N.E.T.)Process for the broadcasting and reception of access title control messages
US5029207 *1 Feb 19902 Jul 1991Scientific-Atlanta, Inc.External security module for a television signal decoder
US5138659 *2 May 199111 Aug 1992General Instrument CorporationConversion of television signal formats with retention of common control data stream
US5237610 *29 Mar 199117 Aug 1993Scientific-Atlanta, Inc.Independent external security module for a digitally upgradeable television signal decoder
US5301245 *27 Mar 19925 Apr 1994Pioneer Electronic CorporationSystem for transmitting a commercial program in a CATV system
US5485221 *19 Apr 199416 Jan 1996Scientific-Atlanta, Inc.Subscription television system and terminal for enabling simultaneous display of multiple services
US5600378 *22 May 19954 Feb 1997Scientific-Atlanta, Inc.Logical and composite channel mapping in an MPEG network
US5734589 *31 Jan 199531 Mar 1998Bell Atlantic Network Services, Inc.Digital entertainment terminal with channel mapping
US5742677 *3 Apr 199521 Apr 1998Scientific-Atlanta, Inc.Information terminal having reconfigurable memory
US5832084 *5 Jan 19963 Nov 1998Lg Electronics, Inc.Recording method of digital magnetic recording medium for copyright protection and variable speed playback
US5870474 *29 Dec 19959 Feb 1999Scientific-Atlanta, Inc.Method and apparatus for providing conditional access in connection-oriented, interactive networks with a multiplicity of service providers
US5899578 *19 Dec 19964 May 1999Sony CorporationDigital signal processor, processing method, digital signal recording/playback device and digital signal playback method
US5987126 *13 Mar 199816 Nov 1999Kabushiki Kaisha ToshibaDevice having a digital interface and a network system using such a device and a copy protection method
US6035037 *4 Aug 19957 Mar 2000Thomson Electronic Consumers, Inc.System for processing a video signal via series-connected high speed signal processing smart cards
US6097818 *3 Jul 19971 Aug 2000Mitsubishi CorporationData copyright management method
US6105134 *31 Jul 199815 Aug 2000Scientific-Atlanta, Inc.Verification of the source of program information in a conditional access system
US6223285 *24 Oct 199724 Apr 2001Sony Corporation Of JapanMethod and system for transferring information using an encryption mode indicator
US6278984 *27 Jul 199521 Aug 2001Fujitsu LimitedSoftware processing apparatus writing software to a medium only if identification information in the software corresponds to identification information in the medium
US6373948 *15 Aug 199716 Apr 2002Lucent Technologies Inc.Cryptographic method and apparatus for restricting access to transmitted programming content using program identifiers
US6396850 *24 Sep 199628 May 2002Thomson Licensing S.A.Method for cascading detachable conditional access modules, circuit for inserting a predetermined sequence and circuit for detecting the said sequence in order to implement the method
US6424715 *3 Jun 199723 Jul 2002Mitsubishi CorporationDigital content management system and apparatus
US6477179 *4 May 19985 Nov 2002Sony CorporationData receiving device and data receiving method
US6477185 *28 Sep 19985 Nov 2002Hitachi, Ltd.Demultiplexing and decoding apparatus for coded audio and video data
US6588015 *14 Jan 19981 Jul 2003General Instrument CorporationBroadcast interactive digital radio
US6604215 *6 Apr 19995 Aug 2003Sony CorporationDigital broadcast receiver and method for controlling reception thereby
US7218736 *22 Apr 199815 May 2007Matsushita Electric Industrial Co., Ltd.Data transfer method
US7239706 *16 Jul 19963 Jul 2007Deutsche Telekom AgTranscoder for decoding encoded TV programs
US20020007452 *11 Aug 199717 Jan 2002Chandler Brendan Stanton TrawContent protection for digital transmission systems
WO1996007267A2 *4 Aug 19957 Mar 1996Thomson Consumer Electronics, Inc.System for processing a video signal via series-connected high speed signal processing smart cards
Non-Patent Citations
Reference
1 *Giachetti, J-L., et al. "A common conditional access interface for digital video broadcasting decoders." Consumer Electronics, IEEE Transactions on 41.3 (1995): 836-841.
2 *Okoth, I., R. Schneider, and J-Y. Leroux. "DVB-CI: Gateway to truly interactive multimedia environment." Broadcasting Convention, 1997. International. IET, 1997.
3 *Research Disclosure #408018 (Apr. 1998).
4 *Research Disclosure #408024 (Apr. 1998).
Classifications
U.S. Classification725/31
International ClassificationH04N21/254, H04N21/4405, H04N21/434, H04N21/4627
Cooperative ClassificationH04N21/2541, H04N21/4405, H04N21/4627, H04N21/434, H04N21/43632, H04N21/4623, H04N21/4586, H04N21/4408, H04N21/43615
Legal Events
DateCodeEventDescription
12 Nov 2014ASAssignment
Owner name: SONY EUROPE LIMITED, UNITED KINGDOM
Free format text: CHANGE OF NAME;ASSIGNOR:SONY UNITED KINGDOM LIMITED;REEL/FRAME:034151/0382
Effective date: 20100401
11 Jan 2017ASAssignment
Owner name: SONY CORPORATION, JAPAN
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:SONY EUROPE LIMITED;REEL/FRAME:041474/0450
Effective date: 20150723
8 Mar 2017ASAssignment
Owner name: SATURN LICENSING LLC, NEW YORK
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:SONY CORPORATION;REEL/FRAME:041508/0377
Effective date: 20150911