Pay-TV Security Module Pairing via RFID Intermediary

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing Pay-TV systems face challenges in securely pairing a security module (smart card or CAM) with multiple host devices, particularly in environments where traditional pairing mechanisms are too restrictive or not compatible, and logistical reasons prevent effective pairing, especially with retail devices that do not support such connections.

Innovation Solution

A system utilizing NFC/RFID technologies, where a security device with a wireless transceiver reads and writes an authorization message to a wireless tag attached to the receiver/decoder, allowing secure pairing by comparing identifiers and enabling secure communication without the need for EMMs or powering up the device, allowing users to continue using existing security modules with new appliances.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional pairing mechanisms are used to ensure secure communication between security module and receiver, then security is improved, but device compatibility and ease of operation deteriorate because pairing is too restrictive and not compatible with retail devices

Engineering Contradiction:
ImprovesecurityVSAvoiddevice compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces an RFID tag as an intermediary element that stores authorization information. Instead of requiring direct pairing communication between the security module and receiver, the RFID tag acts as a mediator that the security module can read to verify authorization. This allows the security module to work with multiple receiver devices without establishing traditional pairing relationships, thus improving compatibility while maintaining security through the intermediary authorization mechanism.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If pairing protocols are implemented to prevent sharing of security modules, then security is improved, but ease of operation deteriorates due to complex pairing procedures and inability to use existing modules with new devices

Engineering Contradiction:
ImprovesecurityVSAvoidease of use
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent applies preliminary action by pre-storing authorization information in the RFID tag attached to the receiver device during manufacturing or initial setup. When a security module is inserted, it automatically reads the RFID tag to verify authorization without requiring any pairing procedure. This eliminates complex pairing operations while maintaining security, as the authorization was already established in advance through the RFID tag.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If new security modules are manufactured for each appliance to ensure secure access, then security is improved, but manufacturing cost and device complexity increase

Engineering Contradiction:
ImprovesecurityVSAvoidmanufacturing cost
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent makes the security module universal by enabling it to work with multiple receiver devices through RFID authorization. Instead of manufacturing dedicated security modules for each appliance, a single security module can be authorized to work with multiple receivers by reading their RFID tags. This multi-functionality eliminates the need for device-specific security module manufacturing, reducing costs and complexity while maintaining security through the RFID authorization mechanism.

Inventive Principle:
Principle #6Universality (Multi-functionality)

4Reliability

If EMMs are used for authorization and pairing, then security is improved, but bandwidth usage increases due to continuous communication requirements

Engineering Contradiction:
ImprovesecurityVSAvoidbandwidth usage
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent extracts the authorization verification process from continuous communication requirements. Instead of using EMMs that require ongoing communication between the security module and external authorization servers, the authorization information is extracted and stored locally in the RFID tag. The security module only needs to read the RFID tag for verification, eliminating the need for continuous high-bandwidth communication and reducing energy consumption while maintaining security.

Inventive Principle:
Principle #2Taking out (Extraction)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Enables secure pairing of security devices with receiver/decoders without manufacturing new security modules for each appliance, allowing immediate use of new devices without unpacking or powering them up, and reduces bandwidth usage by eliminating the need for EMMs, ensuring secure access to conditional access digital content.

Implementation Method 1

a first wireless transceiver at least to read an authorisation message from the wireless tag

Methodology Applied
Scientific EffectElectromagnetic induction: Electromagnetic Induction

Implementation Method 2

a communication device having a second wireless transceiver at least to write the authorisation message to the wireless tag

Methodology Applied
Scientific EffectElectromagnetic induction: Electromagnetic Induction

Data Source

PatentUS9819988B2Security device for pay-TV receiver decoder
Publication Date: 2017.11.14 NAGRAVISION SA
  • US9819988B2 patent drawing
  • US9819988B2 patent drawing

AI summary

The aim of the present invention is to ensure that a security module SC or CAM is used with an authorized receiver device. A security device for Pay-TV receiver decoder, in charge of processing the security messages and to extract the keys or rights from the security messages, this security device comprising a memory to store at least one reference identifier of the receiver/decoder, characterized in that, it further comprises a wireless reader to read a wireless tag containing a receiver/decoder identifier with which it is connected, and means to compare this identifier with the reference identifier, said security device modifying the processing of the security messages in function of the comparison result.