Secure Element Mediator for DRM Key Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems face challenges in securely managing keys for transforming conditional access system-protected content into digital rights management system-protected content, ensuring secure key management, and maintaining interoperability between different DRM technologies while allowing random recording during broadcasts without compromising bandwidth.

Innovation Solution

A method and system that involve receiving entitlement control messages, decrypting data packets, and generating DRM keys within a secure environment, using a conditional access system to encrypt and decrypt content, and storing encrypted data with location information for secure retrieval and playback across various DRM systems.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If DRM keys are generated within the consumer electronics device, then key management flexibility is improved, but security is worsened due to potential key exposure

Engineering Contradiction:
Improvekey management flexibilityVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

A secure element acts as an intermediary between the conditional access system and the DRM system. The secure element generates and stores DRM keys in a protected environment, preventing key exposure while enabling DRM key generation functionality within the device. This mediator approach allows the device to have DRM capabilities without compromising security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If all recording information is provided in entitlement control messages, then random recording is enabled, but message size increases

Engineering Contradiction:
Improverandom recording capabilityVSAvoidmessage size
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

Recording information is segmented into two parts: essential recording control information is included in the entitlement control messages to enable random recording, while detailed DRM key management information is separated and handled through alternative mechanisms. This segmentation reduces the size of ECM messages while maintaining random recording functionality.

Inventive Principle:
Principle #1Segmentation

3Adaptability or versatility

If interface between CA and DRM systems is implemented, then interoperability is improved, but device complexity increases

Engineering Contradiction:
ImproveinteroperabilityVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The conditional access system and DRM system are merged into a unified architecture where the secure element serves both CA and DRM functions. The interface between CA and DRM systems is integrated at the secure element level, allowing key generation and content protection to be handled by a single secure component rather than requiring separate independent interfaces, thereby reducing overall system complexity.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS8595854B2Processing recordable content in a stream
Publication Date: 2013.11.26 IRDETO BV
  • US8595854B2 patent drawing
  • US8595854B2 patent drawing
  • US8595854B2 patent drawing

AI summary

Methods and a systems are described for processing recordable content in a broadcast stream sent to a receiver, wherein said broadcast stream is protected in accordance with a conditional access system and wherein said receiver is configured for storing and consuming content in said broadcast stream in accordance with a digital rights management system. In this methods and systems recording information is sent in one or more entitlement control messages over a broadcast network to a receiver. Using the recording information in the entitlement control messages the receiver is able to store recordable events in a broadcast stream on a storage medium and to consume said recorded events in accordance with a digital rights management system.