Conditional Access System Using Return Channel Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional conditional access systems in digital audio and video broadcasting rely heavily on user equipment and smart cards for content authorization, making them vulnerable to tampering and unauthorized access, with users often waiting for decoding keys and facing inefficiencies in managing content access.

Innovation Solution

Implementing a return communications channel between the user's receiving equipment and the broadcaster to perform additional authorization checks, ensuring that the broadcaster directly manages content access and verifies user entitlements, enhancing the robustness of the conditional access system.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional conditional access systems rely solely on user equipment and smart cards for content authorization, then the system structure remains simple, but security against tampering and unauthorized access deteriorates

Engineering Contradiction:
Improvesecurity against tamperingVSAvoidsystem structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

A communication channel between the user's receiving equipment and the broadcaster serves as an intermediary mechanism. This channel enables the broadcaster to receive authorization requests from the receiving equipment and send authorization decisions back, creating a mediated verification process that enhances security without requiring complete system redesign. The intermediary channel allows for additional authorization checks while maintaining system functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the broadcaster directly manages content access through additional authorization checks, then security and control improve, but user access time and system response time worsen

Engineering Contradiction:
Improvecontent access controlVSAvoiduser access time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary authorization checks by having the receiving equipment send authorization requests to the broadcaster before content decoding begins. The broadcaster verifies user entitlements in advance through the communication channel and returns authorization decisions beforehand. This preliminary action ensures that time-critical content decoding operations can proceed efficiently once authorization is confirmed, reducing overall access time while maintaining strong security control.

Inventive Principle:
Principle #10Preliminary action

3Extent of automation

If additional authorization checks are implemented through return communication channels, then broadcaster control over content access improves, but device complexity and communication overhead increase

Engineering Contradiction:
Improvebroadcaster controlVSAvoidcommunication protocol
Core Design Contradiction:
Extent of automationVSDevice complexity

Solution Approach 1:

The communication channel establishes a feedback loop where the receiving equipment sends authorization requests containing user identification and content information to the broadcaster, and the broadcaster returns authorization decisions. This feedback mechanism enables the broadcaster to maintain direct control over content access while using a relatively simple communication protocol. The feedback loop allows for automated verification without requiring complex processing or multiple communication steps.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS8874918B2Conditional access method and system for broadcast services
Publication Date: 2014.10.28 TELECOM ITALIA SPA
  • US8874918B2 patent drawing
  • US8874918B2 patent drawing
  • US8874918B2 patent drawing

AI summary

A method for conditionally allowing fruition of broadcast contents, broadcast by a contents broadcaster and received by a user by means of a receiving equipment, includes: performing, locally at the receiving equipment of the user, a first fruition entitlement check based on first fruition entitlement data available locally at the receiving equipment; having the receiving equipment provide to the contents broadcaster the first fruition entitlement data exploiting a return communications channel of the receiving equipment; having the contents broadcaster perform a second fruition entitlement check based on a comparison between the received first fruition entitlement data and second fruition entitlement data available locally to the contents broadcaster; and conditioned on a result of the second check, having the contents broadcaster provide to the receiving equipment, exploiting the return communications channel, a fruition entitlement confirmation notification; at the receiving equipment, conditioning the fruition of the broadcast contents based on the receipt of the fruition entitlement confirmation by the contents broadcaster.