Security Processor Identification via State Suspension
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for identifying shared security processors in card-sharing networks are inefficient and do not account for all shared cards, allowing pirate services to illegitimately access protected multimedia content.
Innovation Solution
A method that temporarily suspends identified security processors to facilitate the identification of additional processors, making it difficult for the sharing server to detect the method and maximizing the number of identified shared security processors, while automating the formation and re-establishment of processor groups based on evolving identification processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing identification methods are used, then the identification process is simple, but the number of identified shared security processors is incomplete and pirate services can access protected content
Solution Approach 1:
The identification process is segmented into multiple phases: initial identification of shared processors, temporary suspension of identified processors, second identification phase to find additional processors, and re-establishment of suspended processors. This segmentation allows the system to iteratively identify more processors while managing complexity through structured steps.
Solution Approach 2:
The system performs preliminary suspension of identified security processors before conducting the second identification phase. This preliminary action prevents already-identified processors from being detected again, enabling the identification of additional processors that would otherwise remain hidden behind the first batch.
2Reliability
If the identification device continuously monitors all security processors, then all shared processors can be identified, but the calculation load and cost increase significantly
Solution Approach 1:
The identification device operates periodically in waves rather than continuously. It conducts identification phases, suspends processors, waits for re-establishment, and then conducts subsequent identification phases. This periodic operation significantly reduces calculation load compared to continuous monitoring while still achieving comprehensive identification over time.
Solution Approach 2:
The system uses the natural re-establishment behavior of suspended security processors to its advantage. When processors are temporarily suspended and then re-established by the sharing server, they automatically become visible again for identification. This self-service mechanism allows the identification device to leverage processor behavior patterns rather than requiring active continuous probing.
3Ease of operation
If security processors remain continuously active, then the system operates smoothly, but shared processors can be detected and pirate services identified
Solution Approach 1:
The system dynamically changes the operational state of security processors by temporarily suspending them during identification phases. This dynamic state change allows the system to alternate between smooth operation (when processors are active) and detection mode (when processors are suspended and re-established), making it difficult for pirate services to maintain consistent undetected operation.
Solution Approach 2:
The system changes the operational parameter of security processors from active to suspended state temporarily. This parameter change disrupts the normal operation of pirate services that rely on continuous processor availability, while the temporary nature of suspension minimizes impact on legitimate users who can have their processors re-established.
Data Source
Figure 1
Figure 2~3
AI summary
The invention relates to a method for the identification of security processors in a system for delivering protected multimedia content, in which: upon request from an identification device, a network head-end transmits (136) a command to suspend a first identified pre-determined security processor which, in response, switches (136) from an active state to an idle state; the sharing server detects (120) that the first security processor is in the idle state and then transmits (120) access control messages to a second security processor instead of the first security processor; in response to the identification of at least the second security processor, upon request from the identification device, the network head-end transmits (134) a command to re-establish the first security processor, and, subsequently, in response, the first security processor switches (134) from the idle state to the active state.