16 results about "Conditional access" patented technology

A method at a first communication device for providing a second communication device access to content, the method comprising: providing an offer to the second communication device, offering the second communication device conditional access to the content, wherein access to the content at the second communication device is adaptable based on sensor data of at least one of the first and the second communication device; acquiring sensor data of at least one of the first and the second communication device; providing the second communication device full access to the content in case it is that the sensor data of at least one of the first and the second communication device indicates that the second communication device shall be grated full access to the content, or determining that access to the content is to be restricted at the second communication device, and providing the second communication device restricted access to the content, in case it is determined that sensor data of at least one of the first and the second communication device is indicating that access to the content is to be restricted at the second communication device.

The invention provides a method of enabling a conditional access to a service delivered by a service provider. The method comprises receiving (209) by an issuer entity, a fungible token request from a user device, the fungible token request comprising a public key of the service provider, a public key of a secure element associated with the user device and requested information to be incorporated in a fungible token. A fungible token is computed (210) based on the requested information comprised in the fungible token request, and encrypted (211) using the public key of the service provider, to obtain a first encrypted fungible token. The first encrypted fungible token is further encrypted using the public key of the secure element to obtain a second encrypted fungible token, which is transmitted (212) to the user device.

The invention relates to a system for rendering content, the rendering of which is subject to conditional access security conditions. A system is described comprising a host device and a detachable security device, the security device being arranged to decrypt encrypted content, re-encrypt it under a local key and deliver the re-encrypted content to the host device while ensuring that the host device is compliant or otherwise implements any conditions associated with rendering the content.

A pairing method between a user device (1) and an operator device (2), the user device (1) being intended to receive conditional access data from the operator device (2), the user device having a user device identifier (UID), the operator having an operator device identifier (OID). The method comprises receiving, by the user device, a user device key (KUID) derived from a first cryptographically secure function and receiving, by the operator device, an operator key (KOID) derived from a second cryptographically secure function. The user device comprises a user device bilinear mathematical function (e(KUID, OID)) and the operator device comprises an operator bilinear mathematical function (e(UID, KOID)) which each define a pairing over an elliptic curve. The method includes generating, by the operator device (2), a pairing key (KD=e(UID, KOID)) between the user device (1) and the operator device (2), using the operator key (KOID) and the device identifier (UID) as variables of the operator mathematical function (e(UID, KOID)). The user device (1) generates the same pairing key (KD=e(KUID, OID)) using the user device key (KUID) and the operator device identifier (UID) as variables of the user device mathematical function e(KUID, OID).

Method to revoke a receiving device among a population of receiving devices having access to conditional access data, corresponding computer program products and devices A method is proposed to revoke a receiving device among a group of receiving devices having access to conditional access data. The group is organized in a hierarchical tree structure starting by a root, represented by a root key, down to the leaves associated to the receiving devices, a leaf being represented by a key which is unique to the receiving device associated to the leaf, a path starting from the root and terminating by a leaf having multiple nodes represented by group keys. According to such method, new keys are populated only in the receiving devices using group keys representing nodes along the path starting from the root and terminating by a leaf associated to the revoked receiving device. The new root key is thus only present in the authorized receiving devices at the end. The revoked device cannot any more access to the new root key.

The present disclosure relates to control integrated circuits, television receivers, and methods. The present invention provides a control integrated circuit, a related television receiver, and a method for maintaining control of video output to a conditional access module by reference clock regeneration. The control integrated circuit can include an input control circuit, a frame processing circuit, a clock control circuit, and an output control circuit. The input control circuit receives a transport stream (TS) data signal from a demodulator circuit, the frame processing circuit performs frame processing operations on the TS data signal to prepare a plurality of frames, the clock control circuit generates a second reference clock signal from a TS active signal as a substitute for a first reference clock signal, and the output control circuit outputs the plurality of frames to the conditional access module in accordance with the second reference clock signal to allow the conditional access module to perform conditional access control for the television receiver.

Some embodiments operationally connect a risk score with cybersecurity protection mechanisms and user interactions data in a feedback loop. The risk score guides protection activities by the protection mechanisms, thereby prompting or preventing various user interactions. The protection activities and the user interactions are recorded in audit logs, and curated data based on the audit logs is fed to a risk scoring model as input. The risk scoring model then updates the risk score, and the loop repeats as the protection mechanisms alter their protection activities based on the updated risk score, thereby providing adaptive protection. Security tools for insider risk management, data leak prevention, and conditional access are enhanced to provide adaptive protection, by recording protection activities and user interactions for use as risk model input, and by checking regularly for risk score updates and modifying their protection activities accordingly.

The utility model discloses a test suite for a digital television host and a conditional access module, which comprises a main controller, an interface bus, a digital television host interface adaptation unit, a conditional access module interface adaptation unit, a modulation-demodulation interface unit, a storage unit and a network interface unit, the main controller is respectively connected with the storage unit, the modulation-demodulation interface unit and the network interface unit, and is also respectively connected with the digital television host interface adaptation unit and the conditional access module interface adaptation unit through the interface bus; and the digital television host interface adaptation unit is respectively connected with the conditional access module interface adaptation unit and the modulation-demodulation interface unit. The test suite provided by the utility model can be compatible with tests of the digital television host and the conditional access module.

Some embodiments enhance the security of domain name resolution and other DNS operations by automatically intercepting DNS operations, determining an associated device identity, or ascertaining an associated user identity, and enforcing security policies based at least on the DNS operations and based on at least one of the identities. Some protectable DNS operations include request resolution, reverse lookup from an IP address to a domain name, DNS record access, mail server mapping, redirection, forwarding, and DNS record caching operations. Implementing the policy includes, for example, blocking a result requested by the DNS operation, permitting computation progress towards the requested result, permitting different results, modifying the DNS record, or flushing the DNS record from a cache. In some embodiments, a DNS operation security function utilizes or implements a conditional access security function, providing, for example, secure conditional domain name resolution.

The invention provides a method of enabling a conditional access to a service delivered by a service provider. The method comprises receiving (209) by an issuer entity, a fungible token request from a user device, the fungible token request comprising a public key of the service provider, a public key of a secure element associated with the user device and requested information to be incorporated in a fungible token. A fungible token is computed (210) based on the requested information comprised in the fungible token request, and encrypted (211) using the public key of the service provider, to obtain a first encrypted fungible token. The first encrypted fungible token is further encrypted using the public key of the secure element to obtain a second encrypted fungible token, which is transmitted (212) to the user device.

In a cloud computing environment, a cross-tenant access security measure includes monitoring conditional access policies for changes or additions that hamper or threaten to hamper an authorized access from an assistant tenant user to a focus tenant. In some cases, cross-tenant access security includes tracking a role assignment list to detect rogue roles, or to detect hampering role changes such as role deletions, or both. In some cases, focus tenant events and assistant tenant events are correlated in an audit. In some cases, the authorized access is a zero standing time bound access. In some cases, the authorized access is constrained to an IP address range, or constrained to login from a managed device, or both. In short, security measures are described that mitigate accidental or surreptitious role or policy changes that would shut down or hinder authorized cross-tenant access.

An apparatus comprising means for: receiving secondary radio link failure information, wherein the secondary radio link failure information is indicative of circumstances of a failure in a secondary radio link between a user equipment and at least one source secondary node while the user equipment was configured to conditionally access a target secondary node, and the user equipment is having dual connectivity with a source master node and a source secondary node; determining based, at least in part, on the received secondary radio link failure information at least one target primary cell of a secondary cell group, of the target secondary node, wherein the determined at least one target primary cell of a secondary cell group is to be included in information indicating at least one suggested target primary cell of a secondary cell group to be prepared by the target secondary node for conditional access by a user equipment; and transmitting information indicative of the determined at least one target primary cell of a secondary cell group, of the target secondary node.

An apparatus comprising means for: receiving secondary radio link failure information, wherein the secondary radio link failure information is indicative of circumstances of a failure in a secondary node while the user equipment was configured to conditionally access at least one target secondary node, and the user equipment is having dual connectivity with a source master node and a source secondary node; determining a plurality of suggested target primary cells of a secondary cell group to be prepared by the at least one target secondary node for conditional access by a user equipment; determining, based at least in part on the received secondary radio link failure information, assistance information, wherein the assistance information assists the at least one target secondary node in determining which at least one of the plurality of suggested target primary cells of a secondary cell group is to be prepared by the at least one target secondary node for conditional access by a user equipment; and transmitting, directly or indirectly, information indicative of the plurality of suggested target primary cells of a secondary cell group and the determined assistance information to the at least one target secondary node.

A wireless communication method performed by a user equipment (UE) includes performing an authentication procedure with a network device to establish a security context between the UE and a first network function of the network device and determining that a distributed non-access stratum (NAS) security policy indicates access rules for the UE, comprising at least one of the following: allowed access, conditional access, or not allowed access to network functions.

In a cloud computing environment, cross-tenant access security measurements monitor conditional access policies for changes or additions that impede or threaten authorized access to focused tenants from assistant tenant users. Some cross-tenant access securely tracks role assignments to detect fraudulent roles, or detect hindering role changes. In some cases, focused tenant events and assistant tenant events are related in audit. In some cases, authorized access is zero resident time limit access. In some cases, authorized access is constrained to an IP address range, or to login from a hosted device, or both. In some cases, assets are excluded from hosted response remedial actions. In some cases, the hosting response is adjusted through product-specific role-based access control. In some cases, repeated logins are avoided to allow for faster hosted responses.