CA1268247A - Security arrangement for downloadable cable television converters - Google Patents
Security arrangement for downloadable cable television convertersInfo
- Publication number
- CA1268247A CA1268247A CA000539619A CA539619A CA1268247A CA 1268247 A CA1268247 A CA 1268247A CA 000539619 A CA000539619 A CA 000539619A CA 539619 A CA539619 A CA 539619A CA 1268247 A CA1268247 A CA 1268247A
- Authority
- CA
- Canada
- Prior art keywords
- booter
- checksum
- image
- converter
- data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Lifetime
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/443—OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
- H04N21/4432—Powering on the client, e.g. bootstrap loading using setup parameters being stored locally or received from the server
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/438—Interfacing the downstream path of the transmission network originating from a server, e.g. retrieving MPEG packets from an IP network
- H04N21/4383—Accessing a communication channel
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream, rendering scenes according to MPEG-4 scene graphs
- H04N21/4405—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream, rendering scenes according to MPEG-4 scene graphs involving video stream decryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
- H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
- H04N21/4627—Rights management associated to the content
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/81—Monomedia components thereof
- H04N21/8166—Monomedia components thereof involving executable data, e.g. software
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/81—Monomedia components thereof
- H04N21/8166—Monomedia components thereof involving executable data, e.g. software
- H04N21/8193—Monomedia components thereof involving executable data, e.g. software dedicated tools, e.g. video decoder software or IPMP tool
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/16—Analogue secrecy systems; Analogue subscription systems
- H04N7/167—Systems rendering the television signal unintelligible and subsequently intelligible
- H04N7/1675—Providing digital key or authorisation information for generation or regeneration of the scrambling sequence
Abstract
ABSTRACT
A method and apparatus prevent unauthorized programming viewing via a downloadable cable television converter. A booter checksum is computed from data contained in a downloaded booter image. A
valid checksum is extracted from tag data associated with a scrambled program signal transmitted on the cable system. The booter checksum is compared to the extracted valid checksum. If the booter checksum and valid checksums match, a descrambler is enabled to descramble the scrambled program signal. If the checksums do not match, the descrambler is not enabled. In this manner, a pirate is prevented from downloading a false booter image to defeat the integrity of the converter.
A method and apparatus prevent unauthorized programming viewing via a downloadable cable television converter. A booter checksum is computed from data contained in a downloaded booter image. A
valid checksum is extracted from tag data associated with a scrambled program signal transmitted on the cable system. The booter checksum is compared to the extracted valid checksum. If the booter checksum and valid checksums match, a descrambler is enabled to descramble the scrambled program signal. If the checksums do not match, the descrambler is not enabled. In this manner, a pirate is prevented from downloading a false booter image to defeat the integrity of the converter.
Description
~ 8;~4~
This invention relates to cable television systems using downloadable converters, and more particularly, to a method and apparatus for preventing unauthorized parties from illeyitimate access to cable television programs.
Cable television (CATV) systems which provide access to regular television programming and "premium"
or "pay-per-view" programming are well known. It has long been desirable to introduce fully downloadable CATV converters which can accept all of their operating software from a booter channel upon power up. Downloadable converters are easier to maintain than known read only memory (ROM) based products, and provide the additional advantage of allowing field upgradeability and customization as new features are introduced in a cable television system. Further, downloadable converters can serve as an essential bridge, via emulation software, for systems which wish to retire older products in a phased manner.
324~
One important obstacle that has prevented the development of one-say CATV systems with downloadable converters is the issue of software security. For example, a "pirate" booter image could be loaded into a converter (e.g., by a subscriber who wants to receive premium channels without paying), which could defeat the-integrity of the converter by permitting all video programs to be unscrambled without permission. This problem has been solved in a two-way CATV system using a technique described in co-pending Canadian patent application Serial No. 507,504 filed April 24, 1986, entitled "BOOTSTRAP CHANNEL SECURITY
ARRANGEMENT FOR COMMUNICATION NETWORK", which application is assigned to the present applicant. In the apparatus and method disclosed in the co-pending application, software is downloaded on a booter channel via a communication network. A subscriber terminal coupled to the network initiates a communication with the network to receive downloaded booter data. The downloaded data is stored, and a checksum is computed from at least a portion of the downloaded data. The checksum is tested for validity, and control of the subscriber terminal is released to the downloaded software only if the checksum is valid.
It would be advantageous -to provide a method and apparatus for securing the booter image in one-way CATV
systems. In one-way systems, there is no ability to transfer a computed checksum back to the headend - , .... .,. .. - ,.
-- ~2682~7 for verification. Thus, a system must be provided wherein verification of the booter image occurs at the subscriber converter, and wherein an illegitimate booter image prevents the converter from enabling the viewing of an unauthorized program. The present invention relates to such an apparatus and method.
. .
.:
.
~:682~'~
In accordance with the present invention, the bootsr image on a one-way CATV system using downloadable converters is secured to prevent unauthorized receipt of programming. In one embodiment, the video descrambling process is disabled unless a valid checksum is computed from the downloaded booter image. Such apparatus includes means for computing a booter checksum from data contained in a downloaded booter image. Meansl coupled to receive a program signalj extract a valid checksum from tag data associated with the signal.
The booter checksum is compared to the extracted valid checksum, and if a match is found, a descrambler is enabled to unscramble the program signal.
Means can be provided for storing the booter checksum after it is computed at the converter. The storing means can then be inhibited from storing another checksum until a new booter image is downloaded.
In accordance~with the method of the present invention, unauthorized partias are precluded from obtaining illegitimate access to cable television programs in a cable system in which a booter image is ! ' downloaded to subscriber converters. A booter checksum is computed from booter image data downloaded to a subscriber converter. The booter checksum is compared to a valid checksum extracted from data associated with a television slgnal received via the cable system. A subscriber is prevented from viewing _ . .... .. . .. ...
~l2~8~4~
. -- 5 a scrambled program unless the checksum computed from the booter image matches the valid checksum. The booter image and valid checksum data can be changed on a periodic basis to further frustrate the efforts of a S pirate who attempts to overcome the checksum security feature.
According to the invention, there is provided a method for preventing unauthorized parties from illegitimate access to cable television programs in a cable system in which a booter image is downloaded to subscriber converters, comprising the steps of tuning a data receiver in a subscriber terminal to a booter channel to receive downloaded booter image data;
re-tuning said data receiver to a separate channel for receipt of additional data after receipt of said booter image data; computing a booter checksum from said booter image data; comparing the booter checksum to a valid checksum extracted from data associated with a television signal received by the subscriber converter via the cable system; and preventing a subscriber from viewing a program to be reproduced from a received television signal unless the checksum computed from the booter image matches the valid checksum.
According to another aspect of the invention, an apparatus for preventing unauthorized receipt of programming in a downloadable cable television ~2~824~
converter comprises receiver means for receiving data downloaded via a cable television network; means for automatically tuning said receiver means to a dedicated booter channel for receipt of data comprising a booter image when said converter is powered up; means for subsequently tuning said receiver means to a separate channel for receipt of additional data after receipt of said booter image; means for computing a booter checksum ~rom data contained in said booter image;
means, coupled to receive a program signal, for extracting a valid checksum from tag data associated with said signal; means for comparing the booter checksum to said extracted valid checksum; a descrambler coupled to receive at least a portion of said program signal to be descrambled; and means operatively associated with said descrambler for enabling the decrambler to operate only if said comparing means determines that the booter ~hecksum matches the extracted valid checksum.
In the drawings, The figure is a block diagram illustrating the pertinent parts of a CATV converter/descrambler in accordance with the present invention.
~2~ 7 The present invention provides security for a booter image downloaded to a cable television converter from a cable television system headend.
As diagrammatically shown in the figure, a cable television converter 11 is coupled to a cable television system via an input terminal 10. The cable system carries various signals, including a video signal which can have tag data associated therewith as illustrated by line 12, and an addressable data stream as illustrated by line 14. The provision of the video signal/tag data and addressabl~ data stream-àre conventional, and have been used in conjunction with known cable television converters such as that manufactured by the Jerrold Division of General Instrument Corporation and designated as Model No.
DRZN-3A.
In accordance with the present invention, an additional signal is transmitted via the cable system in the form of a booter image, designated by line 16 in the figure. Like the addressable data streamj which is typically delivered via a 14 kilobit per second (kb/s) FM data stream, the booter image is transmitted via a second FM data stream that is added to the cable system and dedicated to the booter image.
This "booter channel" cyclically transmits operating software to the converter. A fre~uency agile FM
receiver 18 is provided in converter 11 to receive either the addressable data stream or the booter image from the cable system. When converter 11 is powered ~26~X~'7 up, an initialization program stored in the "BOOT ROM"
30 force tunes receiver 18 (via microprocessor 24) to the booter channel on which thle incoming booter image appears. The booter image is received by receiver 18 and the data (including the converter operating software) contained therein is loaded into the converter's random access memory (RAM) 32.
After downloading of the booter image is complete, receiver 18 is retuned to the channel which contains the addressable data stream~ Data from the addressable data stream is stored, during the operation of converter 11 and in accordance with the operating software, in RAM 32 or RAM 34 via the converter's microprocessor 24. A battery 36 provides backup for RAM 34 in the event of a power failure, thereby maintaining the data stored in RAM 34.
Signals contained in the addressable data stream received by frequency agile receiver 18 are placed on the cable by the cable system operator to define, for example, which programs the subscriber using the converter is authorized to receive. The data detected by receiver 18 is transmitted to microprocessor 24 in a conventional manner.
Converter 11 includes a tuner 20 which is coupled to the incoming cable at input terminal 10. Tuner 20 is a dual conversion tuner which produces modulated video and audio carriers at its output for one of a plurality of channels transmitted over the cable. A
subscriber selects a channel using a keyboard (not -~ 12L~8247 g shown) coupled to microprocessor 24 or alternately, with a hand-held remote contro:L unit (not shown) which interfaces with microprocessor 24 using, e.g., well-known infrared signal transmission means.
Microprocessor 24 decodes the channel information and sends a signal to tuner 20 to tune in the selected channel.
The modulated carrier for the selected channel is passed from the output of tuner 20 to a descrambler 26, which may be of the gated RF synch suppression type, and to an AM receiver 22. The modulated carrier contains audio and video signals. In the case of a premium channel, the video signals are scrambled. A~
receiver 22 detects the synchronization data for use by descrambler 26, and couples this data to microprocessor 24. Microprocessor 24 decodes the synchronization data from AM receiver 22 and forwards it to descrambler 26.
Descrambler 26 can comprise a descrambling universal logic array (ULA) which is programmed to perform the descrambling function. A special register 28 is provided in the descrambling ULA into which a booter checksum is loaded. The booter checksum is computed by microprocessor 24, in accordance with the boot ROM 30 softwarer from the booter image received during initialization by frequency agile receiver 18.
Only one such load of a checksum into special register 28 is accepted per initialization. Thus, a downloaded booter image cannot write to special register 28 without initiating a re-boot. After special register 28 is loaded with the checksum computed from the booter image, control is turnecl over to the booter operating software downloaded into RAM 32.
Each program transmitted by the cable system operator includes tag data which is detected by AM
receiver 22 and forwarded to microprocessor 24. In accordance with the present invention, the tag data (which may be transmitted either on the audio carrier or with the video signal of the transmitted program) will include a valid security checksum for all scrambled channels. The descrambling ULA of descrambler 26 extracts this valid checksum via microprocessor 24 and compares it to the one loaded into special register 28. If the checksum cornputed from the booter image ("booter checksumn) matches the valid checksum extracted from the tag data, descrambler 26 is enabled and scrambled programs which the subscriber is authorized to receive are descrambled for viewing. If the booter checksum and valid checksum do not match, the descrambler will not descramble the video, thereby protec~ing the converter from pirates seeking to enable the descrambler using an illegitimate booter image.
It will now be understood that the present invention secures downloadable CATV converters against pirates who attempt to enable descrambling of a scrambled program by downloading an illegitimate booter image to the converter. The CATV converter -~ ~12~24~
includes RAM memory for receiving downloaded software on a separate booter channel. The advantage of such a converter is that it is reprogrammable from the headend. A frequency agile FM receiver 18 is provided to capture the booter image upon initialization of the converter when it is powered up. An initialization program stored in boot ~OM 30, operating in conjunction with microprocessor 24, computes a checksum from the downloaded booter image. This checksum is stored in a special checksum rsgister 28 prior to turning control of the converter over to,the downloaded booter image software.
In operation, the descrambler 26 compares the contents of the special checksum register to a transmitted program checksum carried in program tag data. Descrambling is enabled only if the checksums match. Hardwired logic in the descrambler ULA
prevents the downloaded program from changing the contents of the checksum register. In this manner, a pirate is prevented from downloading a false booter image to defeat the integrity of the converter~
This invention relates to cable television systems using downloadable converters, and more particularly, to a method and apparatus for preventing unauthorized parties from illeyitimate access to cable television programs.
Cable television (CATV) systems which provide access to regular television programming and "premium"
or "pay-per-view" programming are well known. It has long been desirable to introduce fully downloadable CATV converters which can accept all of their operating software from a booter channel upon power up. Downloadable converters are easier to maintain than known read only memory (ROM) based products, and provide the additional advantage of allowing field upgradeability and customization as new features are introduced in a cable television system. Further, downloadable converters can serve as an essential bridge, via emulation software, for systems which wish to retire older products in a phased manner.
324~
One important obstacle that has prevented the development of one-say CATV systems with downloadable converters is the issue of software security. For example, a "pirate" booter image could be loaded into a converter (e.g., by a subscriber who wants to receive premium channels without paying), which could defeat the-integrity of the converter by permitting all video programs to be unscrambled without permission. This problem has been solved in a two-way CATV system using a technique described in co-pending Canadian patent application Serial No. 507,504 filed April 24, 1986, entitled "BOOTSTRAP CHANNEL SECURITY
ARRANGEMENT FOR COMMUNICATION NETWORK", which application is assigned to the present applicant. In the apparatus and method disclosed in the co-pending application, software is downloaded on a booter channel via a communication network. A subscriber terminal coupled to the network initiates a communication with the network to receive downloaded booter data. The downloaded data is stored, and a checksum is computed from at least a portion of the downloaded data. The checksum is tested for validity, and control of the subscriber terminal is released to the downloaded software only if the checksum is valid.
It would be advantageous -to provide a method and apparatus for securing the booter image in one-way CATV
systems. In one-way systems, there is no ability to transfer a computed checksum back to the headend - , .... .,. .. - ,.
-- ~2682~7 for verification. Thus, a system must be provided wherein verification of the booter image occurs at the subscriber converter, and wherein an illegitimate booter image prevents the converter from enabling the viewing of an unauthorized program. The present invention relates to such an apparatus and method.
. .
.:
.
~:682~'~
In accordance with the present invention, the bootsr image on a one-way CATV system using downloadable converters is secured to prevent unauthorized receipt of programming. In one embodiment, the video descrambling process is disabled unless a valid checksum is computed from the downloaded booter image. Such apparatus includes means for computing a booter checksum from data contained in a downloaded booter image. Meansl coupled to receive a program signalj extract a valid checksum from tag data associated with the signal.
The booter checksum is compared to the extracted valid checksum, and if a match is found, a descrambler is enabled to unscramble the program signal.
Means can be provided for storing the booter checksum after it is computed at the converter. The storing means can then be inhibited from storing another checksum until a new booter image is downloaded.
In accordance~with the method of the present invention, unauthorized partias are precluded from obtaining illegitimate access to cable television programs in a cable system in which a booter image is ! ' downloaded to subscriber converters. A booter checksum is computed from booter image data downloaded to a subscriber converter. The booter checksum is compared to a valid checksum extracted from data associated with a television slgnal received via the cable system. A subscriber is prevented from viewing _ . .... .. . .. ...
~l2~8~4~
. -- 5 a scrambled program unless the checksum computed from the booter image matches the valid checksum. The booter image and valid checksum data can be changed on a periodic basis to further frustrate the efforts of a S pirate who attempts to overcome the checksum security feature.
According to the invention, there is provided a method for preventing unauthorized parties from illegitimate access to cable television programs in a cable system in which a booter image is downloaded to subscriber converters, comprising the steps of tuning a data receiver in a subscriber terminal to a booter channel to receive downloaded booter image data;
re-tuning said data receiver to a separate channel for receipt of additional data after receipt of said booter image data; computing a booter checksum from said booter image data; comparing the booter checksum to a valid checksum extracted from data associated with a television signal received by the subscriber converter via the cable system; and preventing a subscriber from viewing a program to be reproduced from a received television signal unless the checksum computed from the booter image matches the valid checksum.
According to another aspect of the invention, an apparatus for preventing unauthorized receipt of programming in a downloadable cable television ~2~824~
converter comprises receiver means for receiving data downloaded via a cable television network; means for automatically tuning said receiver means to a dedicated booter channel for receipt of data comprising a booter image when said converter is powered up; means for subsequently tuning said receiver means to a separate channel for receipt of additional data after receipt of said booter image; means for computing a booter checksum ~rom data contained in said booter image;
means, coupled to receive a program signal, for extracting a valid checksum from tag data associated with said signal; means for comparing the booter checksum to said extracted valid checksum; a descrambler coupled to receive at least a portion of said program signal to be descrambled; and means operatively associated with said descrambler for enabling the decrambler to operate only if said comparing means determines that the booter ~hecksum matches the extracted valid checksum.
In the drawings, The figure is a block diagram illustrating the pertinent parts of a CATV converter/descrambler in accordance with the present invention.
~2~ 7 The present invention provides security for a booter image downloaded to a cable television converter from a cable television system headend.
As diagrammatically shown in the figure, a cable television converter 11 is coupled to a cable television system via an input terminal 10. The cable system carries various signals, including a video signal which can have tag data associated therewith as illustrated by line 12, and an addressable data stream as illustrated by line 14. The provision of the video signal/tag data and addressabl~ data stream-àre conventional, and have been used in conjunction with known cable television converters such as that manufactured by the Jerrold Division of General Instrument Corporation and designated as Model No.
DRZN-3A.
In accordance with the present invention, an additional signal is transmitted via the cable system in the form of a booter image, designated by line 16 in the figure. Like the addressable data streamj which is typically delivered via a 14 kilobit per second (kb/s) FM data stream, the booter image is transmitted via a second FM data stream that is added to the cable system and dedicated to the booter image.
This "booter channel" cyclically transmits operating software to the converter. A fre~uency agile FM
receiver 18 is provided in converter 11 to receive either the addressable data stream or the booter image from the cable system. When converter 11 is powered ~26~X~'7 up, an initialization program stored in the "BOOT ROM"
30 force tunes receiver 18 (via microprocessor 24) to the booter channel on which thle incoming booter image appears. The booter image is received by receiver 18 and the data (including the converter operating software) contained therein is loaded into the converter's random access memory (RAM) 32.
After downloading of the booter image is complete, receiver 18 is retuned to the channel which contains the addressable data stream~ Data from the addressable data stream is stored, during the operation of converter 11 and in accordance with the operating software, in RAM 32 or RAM 34 via the converter's microprocessor 24. A battery 36 provides backup for RAM 34 in the event of a power failure, thereby maintaining the data stored in RAM 34.
Signals contained in the addressable data stream received by frequency agile receiver 18 are placed on the cable by the cable system operator to define, for example, which programs the subscriber using the converter is authorized to receive. The data detected by receiver 18 is transmitted to microprocessor 24 in a conventional manner.
Converter 11 includes a tuner 20 which is coupled to the incoming cable at input terminal 10. Tuner 20 is a dual conversion tuner which produces modulated video and audio carriers at its output for one of a plurality of channels transmitted over the cable. A
subscriber selects a channel using a keyboard (not -~ 12L~8247 g shown) coupled to microprocessor 24 or alternately, with a hand-held remote contro:L unit (not shown) which interfaces with microprocessor 24 using, e.g., well-known infrared signal transmission means.
Microprocessor 24 decodes the channel information and sends a signal to tuner 20 to tune in the selected channel.
The modulated carrier for the selected channel is passed from the output of tuner 20 to a descrambler 26, which may be of the gated RF synch suppression type, and to an AM receiver 22. The modulated carrier contains audio and video signals. In the case of a premium channel, the video signals are scrambled. A~
receiver 22 detects the synchronization data for use by descrambler 26, and couples this data to microprocessor 24. Microprocessor 24 decodes the synchronization data from AM receiver 22 and forwards it to descrambler 26.
Descrambler 26 can comprise a descrambling universal logic array (ULA) which is programmed to perform the descrambling function. A special register 28 is provided in the descrambling ULA into which a booter checksum is loaded. The booter checksum is computed by microprocessor 24, in accordance with the boot ROM 30 softwarer from the booter image received during initialization by frequency agile receiver 18.
Only one such load of a checksum into special register 28 is accepted per initialization. Thus, a downloaded booter image cannot write to special register 28 without initiating a re-boot. After special register 28 is loaded with the checksum computed from the booter image, control is turnecl over to the booter operating software downloaded into RAM 32.
Each program transmitted by the cable system operator includes tag data which is detected by AM
receiver 22 and forwarded to microprocessor 24. In accordance with the present invention, the tag data (which may be transmitted either on the audio carrier or with the video signal of the transmitted program) will include a valid security checksum for all scrambled channels. The descrambling ULA of descrambler 26 extracts this valid checksum via microprocessor 24 and compares it to the one loaded into special register 28. If the checksum cornputed from the booter image ("booter checksumn) matches the valid checksum extracted from the tag data, descrambler 26 is enabled and scrambled programs which the subscriber is authorized to receive are descrambled for viewing. If the booter checksum and valid checksum do not match, the descrambler will not descramble the video, thereby protec~ing the converter from pirates seeking to enable the descrambler using an illegitimate booter image.
It will now be understood that the present invention secures downloadable CATV converters against pirates who attempt to enable descrambling of a scrambled program by downloading an illegitimate booter image to the converter. The CATV converter -~ ~12~24~
includes RAM memory for receiving downloaded software on a separate booter channel. The advantage of such a converter is that it is reprogrammable from the headend. A frequency agile FM receiver 18 is provided to capture the booter image upon initialization of the converter when it is powered up. An initialization program stored in boot ~OM 30, operating in conjunction with microprocessor 24, computes a checksum from the downloaded booter image. This checksum is stored in a special checksum rsgister 28 prior to turning control of the converter over to,the downloaded booter image software.
In operation, the descrambler 26 compares the contents of the special checksum register to a transmitted program checksum carried in program tag data. Descrambling is enabled only if the checksums match. Hardwired logic in the descrambler ULA
prevents the downloaded program from changing the contents of the checksum register. In this manner, a pirate is prevented from downloading a false booter image to defeat the integrity of the converter~
Claims (11)
1. Apparatus for preventing unauthorized receipt of programming in a downloadable cable television converter comprising:
receiver means for receiving data downloaded via a cable television network;
means for automatically tuning said receiver means to a dedicated booter channel for receipt of data comprising a booter image when said converter is powered up;
means for subsequently tuning said receiver means to a separate channel for receipt of additional data after receipt of said booter image;
means for computing a booter checksum from data contained in said booter image;
means, coupled to receive a program signal, for extracting a valid checksum from tag data associated with said signal;
means for comparing the booter checksum to said extracted valid checksum;
a descrambler coupled to receive at least a portion of said program signal to be descrambled; and means operatively associated with said descrambler for enabling the descramber to operate only if said comparing means determines that the booter checksum matches the extracted valid checksum.
receiver means for receiving data downloaded via a cable television network;
means for automatically tuning said receiver means to a dedicated booter channel for receipt of data comprising a booter image when said converter is powered up;
means for subsequently tuning said receiver means to a separate channel for receipt of additional data after receipt of said booter image;
means for computing a booter checksum from data contained in said booter image;
means, coupled to receive a program signal, for extracting a valid checksum from tag data associated with said signal;
means for comparing the booter checksum to said extracted valid checksum;
a descrambler coupled to receive at least a portion of said program signal to be descrambled; and means operatively associated with said descrambler for enabling the descramber to operate only if said comparing means determines that the booter checksum matches the extracted valid checksum.
2. The apparatus of claim 1 further comprising:
means for storing the booter checksum:
means for coupling said storing means to said comparing means; and means operatively associated with said comparing means for retrieving the booter checksum from the storing means for comparison with the extracted valid checksum.
means for storing the booter checksum:
means for coupling said storing means to said comparing means; and means operatively associated with said comparing means for retrieving the booter checksum from the storing means for comparison with the extracted valid checksum.
3. The apparatus of claim 2 wherein said booter checksum is computed and stored upon downloading of the booter image, said apparatus further comprising:
means for inhibiting said storing means from storing another checksum until a booter image is again downloaded.
means for inhibiting said storing means from storing another checksum until a booter image is again downloaded.
4. A television communication system comprising:
a transmission path for carrying television signals from a headend to subscriber converters;
means for downloading a booter image to a subscriber converter via said transmission path, said converter comprising receiver means for receiving downloaded data, means for automatically tuning said receiver means to a dedicated booter channel for receipt of said booter image when the converter is powered up, and means for subsequently tuning said receiver means to a separate channel for receipt of additional data after receipt of said booter image;
means for computing a booter checksum from said booter image;
means for extracting a valid checksum from tag data contained in a television signal received at said converter;
means for comparing the booter checksum to the extracted valid checksum;
a descrambler operatively associated with said converter for descrambling television signals; and means operatively associated with said descrambler for enabling the descrambler to operate only if said comparing means determines that the booter checksum matches the extracted valid checksum.
a transmission path for carrying television signals from a headend to subscriber converters;
means for downloading a booter image to a subscriber converter via said transmission path, said converter comprising receiver means for receiving downloaded data, means for automatically tuning said receiver means to a dedicated booter channel for receipt of said booter image when the converter is powered up, and means for subsequently tuning said receiver means to a separate channel for receipt of additional data after receipt of said booter image;
means for computing a booter checksum from said booter image;
means for extracting a valid checksum from tag data contained in a television signal received at said converter;
means for comparing the booter checksum to the extracted valid checksum;
a descrambler operatively associated with said converter for descrambling television signals; and means operatively associated with said descrambler for enabling the descrambler to operate only if said comparing means determines that the booter checksum matches the extracted valid checksum.
5. The communication system of claim 4 wherein said converter comprises second receiver means for receiving television signals.
6. The communication system of claim 4 wherein said receiver means is an FM receiver.
7. A cable television converter comprising:
first receiver means for receiving a booter image to be downloaded to the converter from a dedicated booter channel;
second receiver means for receiving television signals;
means for tuning said first receiver means upon power up to said booter channel to effect a booter image download;
means for subsequently tuning said first receiver means to a separate channel for receipt of additional data after receipt of said booter image;
means for computing a booter checksum from data contained in a downloaded booter image;
means coupled to said second receiver means for extracting a valid checksum from data associated with a received television signal;
means for comparing the booter checksum to the extracted valid checksum; and means for preventing a user from viewing a program to be reproduced from a received television signal if said comparing means determines that the booter checksum does not match the extracted valid checksum.
first receiver means for receiving a booter image to be downloaded to the converter from a dedicated booter channel;
second receiver means for receiving television signals;
means for tuning said first receiver means upon power up to said booter channel to effect a booter image download;
means for subsequently tuning said first receiver means to a separate channel for receipt of additional data after receipt of said booter image;
means for computing a booter checksum from data contained in a downloaded booter image;
means coupled to said second receiver means for extracting a valid checksum from data associated with a received television signal;
means for comparing the booter checksum to the extracted valid checksum; and means for preventing a user from viewing a program to be reproduced from a received television signal if said comparing means determines that the booter checksum does not match the extracted valid checksum.
8. The cable television converter of claim 7 further comprising:
a descrambler coupled to receive and descramble television signals from said second receiver;
said preventing means operatively associated with said descrambler to inhibit the operation of the descrambler if the booter checksum and valid checksum do not match.
a descrambler coupled to receive and descramble television signals from said second receiver;
said preventing means operatively associated with said descrambler to inhibit the operation of the descrambler if the booter checksum and valid checksum do not match.
9. The cable television converter of claim 7 wherein said first receiver means is an FM receiver.
10. A method for preventing unauthorized parties from illegitimate access to cable television programs in a cable system in which a booter image is downloaded to subscriber converters, comprising the steps of:
tuning a data receiver in a subscriber terminal to a booter channel to receive downloaded booter image data;
re-tuning said data receiver to a separate channel for receipt of additional data after receipt of said booter image data;
computing a booter checksum from said booter image data;
comparing the booter checksum to a valid checksum extracted from data associated with a television signal received by the subscriber converter via the cable system;
and preventing a subscriber from viewing a program to be reproduced from a received television signal unless the checksum computed from the booter image matches the valid checksum.
tuning a data receiver in a subscriber terminal to a booter channel to receive downloaded booter image data;
re-tuning said data receiver to a separate channel for receipt of additional data after receipt of said booter image data;
computing a booter checksum from said booter image data;
comparing the booter checksum to a valid checksum extracted from data associated with a television signal received by the subscriber converter via the cable system;
and preventing a subscriber from viewing a program to be reproduced from a received television signal unless the checksum computed from the booter image matches the valid checksum.
11. The method of claim 10 comprising the further steps of:
downloading a booter image to said subscriber converter;
transmitting a television signal with associated valid checksum data to said subscriber converter; and changing the booter image and valid checksum data on a periodic basis.
downloading a booter image to said subscriber converter;
transmitting a television signal with associated valid checksum data to said subscriber converter; and changing the booter image and valid checksum data on a periodic basis.
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US06/874,845 | 1986-06-16 | ||
US06/874,845 US4712239A (en) | 1986-06-16 | 1986-06-16 | Security arrangement for downloadable cable television converters |
Publications (2)
Publication Number | Publication Date |
---|---|
CA1268247A true CA1268247A (en) | 1990-04-24 |
CA1268247C CA1268247C (en) | 1990-04-24 |
Family
ID=25364693
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CA539619A Expired CA1268247C (en) | 1986-06-16 | 1987-06-15 | Security arrangement for downloadable cable television converters |
Country Status (4)
Country | Link |
---|---|
US (1) | US4712239A (en) |
JP (1) | JP2519057B2 (en) |
CA (1) | CA1268247C (en) |
GB (1) | GB2191664B (en) |
Families Citing this family (77)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6292568B1 (en) | 1966-12-16 | 2001-09-18 | Scientific-Atlanta, Inc. | Representing entitlements to service in a conditional access system |
US4965825A (en) | 1981-11-03 | 1990-10-23 | The Personalized Mass Media Corporation | Signal processing apparatus and methods |
US7831204B1 (en) | 1981-11-03 | 2010-11-09 | Personalized Media Communications, Llc | Signal processing apparatus and methods |
USRE47642E1 (en) | 1981-11-03 | 2019-10-08 | Personalized Media Communications LLC | Signal processing apparatus and methods |
US5058160A (en) * | 1988-04-29 | 1991-10-15 | Scientific-Atlanta, Inc. | In-band controller |
US5355480A (en) | 1988-12-23 | 1994-10-11 | Scientific-Atlanta, Inc. | Storage control method and apparatus for an interactive television terminal |
US5003591A (en) * | 1989-05-25 | 1991-03-26 | General Instrument Corporation | Functionally modifiable cable television converter system |
US5113440A (en) * | 1989-07-21 | 1992-05-12 | Oci Communcations, Inc. | Universal decoder |
US5260778A (en) * | 1990-06-26 | 1993-11-09 | General Instrument Corporation | Apparatus for selective distribution of messages over a communications network |
US5239540A (en) * | 1990-11-27 | 1993-08-24 | Scientific-Atlanta, Inc. | Method and apparatus for transmitting, receiving and communicating digital data signals with corresponding program data signals which describe the digital data signals |
US5173900A (en) * | 1991-05-17 | 1992-12-22 | General Instrument Corporation | Method and apparatus for communicating different categories of data in a single data stream |
US5420856A (en) * | 1991-06-18 | 1995-05-30 | Multimedia Design, Inc. | High-speed multi-media switching system |
US5272752A (en) * | 1992-03-16 | 1993-12-21 | Scientific-Atlanta, Inc. | Authorization code lockout mechanism for preventing unauthorized reception of transmitted data |
US6166728A (en) * | 1992-12-02 | 2000-12-26 | Scientific-Atlanta, Inc. | Display system with programmable display parameters |
US5715515A (en) * | 1992-12-02 | 1998-02-03 | Scientific-Atlanta, Inc. | Method and apparatus for downloading on-screen graphics and captions to a television terminal |
US7168084B1 (en) | 1992-12-09 | 2007-01-23 | Sedna Patent Services, Llc | Method and apparatus for targeting virtual objects |
US9286294B2 (en) | 1992-12-09 | 2016-03-15 | Comcast Ip Holdings I, Llc | Video and digital multimedia aggregator content suggestion engine |
US5768539A (en) * | 1994-05-27 | 1998-06-16 | Bell Atlantic Network Services, Inc. | Downloading applications software through a broadcast channel |
US5734589A (en) * | 1995-01-31 | 1998-03-31 | Bell Atlantic Network Services, Inc. | Digital entertainment terminal with channel mapping |
US5635979A (en) * | 1994-05-27 | 1997-06-03 | Bell Atlantic | Dynamically programmable digital entertainment terminal using downloaded software to control broadband data operations |
US5666293A (en) * | 1994-05-27 | 1997-09-09 | Bell Atlantic Network Services, Inc. | Downloading operating system software through a broadcast channel |
US5787171A (en) * | 1994-06-28 | 1998-07-28 | Sony Corporation | Data transmitter and receiver |
IL117221A0 (en) * | 1995-02-28 | 1996-06-18 | Gen Instrument Corp | Configurable hybrid medium access control for cable metropolitan area networks |
US5572517A (en) * | 1995-02-28 | 1996-11-05 | General Instrument Corporation | Configurable hybrid medium access control for cable metropolitan area networks |
US6424717B1 (en) | 1995-04-03 | 2002-07-23 | Scientific-Atlanta, Inc. | Encryption devices for use in a conditional access system |
US20040136532A1 (en) * | 1995-04-03 | 2004-07-15 | Pinder Howard G. | Partial dual-encrypted stream utilizing program map tables |
US8548166B2 (en) | 1995-04-03 | 2013-10-01 | Anthony J. Wasilewski | Method for partially encrypting program data |
US7224798B2 (en) * | 1995-04-03 | 2007-05-29 | Scientific-Atlanta, Inc. | Methods and apparatus for providing a partial dual-encrypted stream in a conditional access overlay system |
US6246767B1 (en) | 1995-04-03 | 2001-06-12 | Scientific-Atlanta, Inc. | Source authentication of download information in a conditional access system |
US6937729B2 (en) | 1995-04-03 | 2005-08-30 | Scientific-Atlanta, Inc. | Representing entitlements to service in a conditional access system |
US6560340B1 (en) | 1995-04-03 | 2003-05-06 | Scientific-Atlanta, Inc. | Method and apparatus for geographically limiting service in a conditional access system |
US6252964B1 (en) * | 1995-04-03 | 2001-06-26 | Scientific-Atlanta, Inc. | Authorization of services in a conditional access system |
US5640452A (en) * | 1995-04-28 | 1997-06-17 | Trimble Navigation Limited | Location-sensitive decryption of an encrypted message |
DE19534528A1 (en) * | 1995-09-08 | 1997-03-13 | Francotyp Postalia Gmbh | Method for changing the data of an electronic franking machine loaded in memory cells |
US5781226A (en) * | 1995-11-13 | 1998-07-14 | General Instrument Corporation Of Delaware | Network virtual memory for a cable television settop terminal |
US5999970A (en) * | 1996-04-10 | 1999-12-07 | World Gate Communications, Llc | Access system and method for providing interactive access to an information source through a television distribution system |
US20040078824A1 (en) * | 1996-04-10 | 2004-04-22 | Worldgate Communications | Access system and method for providing interactive access to an information source through a television distribution system |
US5870472A (en) * | 1996-11-12 | 1999-02-09 | General Instrument Corporation | Dynamic relocation of the service data channel |
US7515712B2 (en) | 1997-08-01 | 2009-04-07 | Cisco Technology, Inc. | Mechanism and apparatus for encapsulation of entitlement authorization in conditional access system |
US6049539A (en) * | 1997-09-15 | 2000-04-11 | Worldgate Communications, Inc. | Access system and method for providing interactive access to an information source through a networked distribution system |
US6256393B1 (en) | 1998-06-23 | 2001-07-03 | General Instrument Corporation | Authorization and access control of software object residing in set-top terminals |
JP4605902B2 (en) * | 1998-07-23 | 2011-01-05 | コムキャスト アイピー ホールディングス アイ, エルエルシー | Interactive user interface |
BR9912386A (en) | 1998-07-23 | 2001-10-02 | Diva Systems Corp | System and process for generating and using an interactive user interface |
US9924234B2 (en) | 1998-07-23 | 2018-03-20 | Comcast Ip Holdings I, Llc | Data structure and methods for providing an interactive program |
US6754905B2 (en) | 1998-07-23 | 2004-06-22 | Diva Systems Corporation | Data structure and methods for providing an interactive program guide |
US6584153B1 (en) | 1998-07-23 | 2003-06-24 | Diva Systems Corporation | Data structure and methods for providing an interactive program guide |
US7091968B1 (en) | 1998-07-23 | 2006-08-15 | Sedna Patent Services, Llc | Method and apparatus for encoding a user interface |
US6425133B1 (en) * | 1998-10-01 | 2002-07-23 | General Instrument Corporation | Method for configuring cable television converter terminal using multiple channels and arrangement therefor |
US6732370B1 (en) | 1998-11-30 | 2004-05-04 | Diva Systems Corporation | Service provider side interactive program guide encoder |
US7254824B1 (en) | 1999-04-15 | 2007-08-07 | Sedna Patent Services, Llc | Encoding optimization techniques for encoding program grid section of server-centric interactive programming guide |
US6704359B1 (en) | 1999-04-15 | 2004-03-09 | Diva Systems Corp. | Efficient encoding algorithms for delivery of server-centric interactive program guide |
US7058965B1 (en) | 1999-04-15 | 2006-06-06 | Sedna Patent Services, Llc | Multiplexing structures for delivery of interactive program guide |
US6621870B1 (en) | 1999-04-15 | 2003-09-16 | Diva Systems Corporation | Method and apparatus for compressing video sequences |
US6651252B1 (en) | 1999-10-27 | 2003-11-18 | Diva Systems Corporation | Method and apparatus for transmitting video and graphics in a compressed form |
US6904610B1 (en) | 1999-04-15 | 2005-06-07 | Sedna Patent Services, Llc | Server-centric customized interactive program guide in an interactive television environment |
US6968567B1 (en) | 1999-04-15 | 2005-11-22 | Sedna Patent Services, Llc | Latency reduction in providing interactive program guide |
US6754271B1 (en) * | 1999-04-15 | 2004-06-22 | Diva Systems Corporation | Temporal slice persistence method and apparatus for delivery of interactive program guide |
US7127737B1 (en) | 2000-01-26 | 2006-10-24 | Sedna Patent Services, Llc | Bandwidth management techniques for delivery of interactive program guide |
US7096487B1 (en) | 1999-10-27 | 2006-08-22 | Sedna Patent Services, Llc | Apparatus and method for combining realtime and non-realtime encoded content |
US6614843B1 (en) | 1999-04-15 | 2003-09-02 | Diva Systems Corporation | Stream indexing for delivery of interactive program guide |
US8255956B2 (en) | 1999-06-28 | 2012-08-28 | Cox Communications, Inc. | System and method for delivery of short-time duration video segments |
US7607152B1 (en) | 2000-01-26 | 2009-10-20 | Cox Communications, Inc. | Demand-cast system and bandwidth management for delivery of interactive programming |
US7464394B1 (en) | 1999-07-22 | 2008-12-09 | Sedna Patent Services, Llc | Music interface for media-rich interactive program guide |
US7373652B1 (en) | 1999-07-22 | 2008-05-13 | Sedna Patent Services, Llc | Server-centric search function in an interactive program guide |
DE60034364D1 (en) | 1999-10-27 | 2007-05-24 | Sedna Patent Services Llc | MULTIPLE VIDEO DRIVES USING SLICE BASED CODING |
US9094727B1 (en) | 1999-10-27 | 2015-07-28 | Cox Communications, Inc. | Multi-functional user interface using slice-based encoding |
US6754908B1 (en) * | 1999-11-12 | 2004-06-22 | General Instrument Corporation | Intrusion detection for object security |
US7793326B2 (en) | 2001-08-03 | 2010-09-07 | Comcast Ip Holdings I, Llc | Video and digital multimedia aggregator |
US7908628B2 (en) | 2001-08-03 | 2011-03-15 | Comcast Ip Holdings I, Llc | Video and digital multimedia aggregator content coding and formatting |
JP4198053B2 (en) * | 2001-08-04 | 2008-12-17 | コンティキ・インコーポレイテッド | Method and apparatus for facilitating distribution and delivery of content over a computer network |
US7434065B2 (en) * | 2003-09-29 | 2008-10-07 | Broadcom Corporation | Secure verification using a set-top-box chip |
EP1519579B1 (en) * | 2003-09-29 | 2014-03-05 | Broadcom Corporation | Secure verification of an STB |
US8396216B2 (en) | 2003-11-21 | 2013-03-12 | Howard G. Pinder | Partial dual-encryption using program map tables |
US20050120384A1 (en) * | 2003-12-01 | 2005-06-02 | General Instrument Corporation | Methods and systems for enabling software and firmware downloads to high definition television appliances |
US20060074812A1 (en) * | 2004-10-06 | 2006-04-06 | Mattern James M | Code pack for revenue protection |
US7617631B2 (en) * | 2006-08-17 | 2009-11-17 | Barbara A. Conrad | Plant container soil cover device |
US9154813B2 (en) | 2011-06-09 | 2015-10-06 | Comcast Cable Communications, Llc | Multiple video content in a composite video stream |
Family Cites Families (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4054911A (en) * | 1976-06-03 | 1977-10-18 | Idr, Inc. | Information retrieval system for providing downstream loading of remote data and processing control thereof |
US4542407A (en) * | 1983-06-10 | 1985-09-17 | North American Philips Corporation | Method and apparatus for scrambling and descrambling television programs |
US4558464A (en) * | 1983-06-10 | 1985-12-10 | General Instrument Corporation | Address-programmable CATV converter |
JPS6016082A (en) * | 1983-07-07 | 1985-01-26 | Sony Corp | Transmission system of scramble television signal |
JPH053824Y2 (en) * | 1985-04-12 | 1993-01-29 |
-
1986
- 1986-06-16 US US06/874,845 patent/US4712239A/en not_active Expired - Lifetime
-
1987
- 1987-06-10 GB GB8713562A patent/GB2191664B/en not_active Expired
- 1987-06-15 CA CA539619A patent/CA1268247C/en not_active Expired
- 1987-06-16 JP JP62150064A patent/JP2519057B2/en not_active Expired - Lifetime
Also Published As
Publication number | Publication date |
---|---|
US4712239A (en) | 1987-12-08 |
GB2191664A (en) | 1987-12-16 |
GB2191664B (en) | 1989-12-13 |
JPS6326093A (en) | 1988-02-03 |
CA1268247C (en) | 1990-04-24 |
JP2519057B2 (en) | 1996-07-31 |
GB8713562D0 (en) | 1987-07-15 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CA1268247A (en) | Security arrangement for downloadable cable television converters | |
US4937866A (en) | System for decoding transmitted scrambled signals | |
US5245420A (en) | CATV pay per view interdiction system | |
US5505901A (en) | CATV pay per view interdiction system method and apparatus | |
US5590202A (en) | Countdown system for conditional access module | |
US4995080A (en) | Television signal scrambling system and method | |
US6067440A (en) | Cable services security system | |
EP0506435B1 (en) | Independent external security module for a digitally upgradeable television signal decoder | |
EP0399200B1 (en) | Functionally modifiable cable television converter system | |
EP0195523B1 (en) | Program blocking method for use in direct broadcast satellite system | |
EP0200310B1 (en) | Direct broadcast satellite signal transmission system | |
US5109286A (en) | CATV reverse path manifold system | |
US4323922A (en) | Television coding system with channel level identification | |
KR20040066901A (en) | Method and system for conditional access | |
US5272752A (en) | Authorization code lockout mechanism for preventing unauthorized reception of transmitted data | |
EP0559802B1 (en) | Catv pay per view interdiction system method and apparatus | |
EP0338866A2 (en) | Method for downloading a scrambled television signal and receiver therefor | |
US20070245370A1 (en) | Copy protection | |
WO2000013151A1 (en) | Security system | |
JPH0818525A (en) | Information transmission system | |
CA1206592A (en) | Adapter for rendering a non-addressable catv converter addressable | |
KR20020070124A (en) | Compact and low-cost system for receiving scrambled signals from a plurality of operators | |
WO1991015922A1 (en) | Audio, video or television apparatus | |
JPS60142687A (en) | Wiretapping prevention system | |
WO1991017630A1 (en) | An improved pay-tv-system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
MKEX | Expiry | ||
MKEX | Expiry |
Effective date: 20070615 |