Set-Top Box Digital Media Conditional Access System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Legacy set-top box systems lack secure means for processing, authorizing, and deauthorizing digital media content, and cannot efficiently support non-video services or store digital media data objects, limiting their ability to provide advanced digital media services.
Innovation Solution
An enhanced encryption/decryption system that uses authorization key messages, entitlement management messages, and entitlement control messages, processed within a set-top box with a hard disk drive, allowing for secure delivery and management of digital media services without interfering with legacy conditional access systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If legacy conditional access systems are used for broadcast services, then service activation and entitlement checking can be performed, but secure delivery and storage of digital media data objects cannot be achieved
Solution Approach 1:
The patent segments the conditional access system into multiple functional modules: a security module for key generation and management, a content protection module for encryption/decryption, and a service authorization module. This segmentation allows each module to specialize in specific security functions while collectively supporting diverse digital media services with reliable security.
Solution Approach 2:
The patent introduces a security module as an intermediary component that acts as a bridge between the legacy conditional access system and new digital media services. This security module handles key generation, encryption, and decryption operations, enabling secure digital media service delivery without modifying the existing conditional access infrastructure.
2Adaptability or versatility
If set-top boxes without media data storage capability are used, then real-time data manipulation is required, but advanced digital media services requiring storage cannot be provided
Solution Approach 1:
The patent designs a multi-functional set-top box architecture that combines traditional broadcast reception capabilities with new digital media service functions. The system can simultaneously handle real-time video streaming and store digital media data objects for on-demand services, making the device versatile without requiring completely separate systems.
Solution Approach 2:
The patent implements a nested architecture where the security module and key management functions are embedded within the set-top box, which itself is part of the larger conditional access system. The security module contains nested sub-components for key generation, encryption, and decryption, creating a layered structure that organizes complexity while enabling advanced functionality.
3Adaptability or versatility
If current STBs designed for video/audio are used, then video services can be delivered, but non-video services cannot be efficiently authorized
Solution Approach 1:
The patent implements a dynamic authorization system that can adapt to different service types. The security module dynamically generates and manages keys based on the specific service being accessed, whether it's traditional video/audio or new non-video digital media services. This dynamic key management enables efficient authorization across diverse service types without requiring separate authorization mechanisms.
4Reliability
If no secure means for processing digital media content is provided, then system simplicity is maintained, but digital media services cannot be securely delivered
Solution Approach 1:
The patent extracts security-critical functions (key generation, encryption, decryption) into a dedicated security module, separating them from the main set-top box processing functions. This extraction concentrates complexity in a specialized component while keeping the overall system architecture clean and maintainable, achieving secure processing without overwhelming system complexity.
Data Source
AI summary
A method, apparatus, and article of manufacture provide the ability to process digital media content. A secret key (Ka) is obtained and encrypted into an authorization key message (AKM) message. One or more entitlement keys (Ke) are then obtained and encrypted using the secret key (Ka) as an encryption key into an entitlement management message (EMM). One or more media content encryption keys (Kc) are obtained and encrypted using one or more of the entitlement keys (Ke) as encryption keys into an entitlement control message (ECM). Digital media data content (Dc) is then obtained and encrypted using the one or more media content encryption keys (Kc). The AKM, EMM, ECM, and encrypted digital media data content are then delivered to a set-top box that is configured to provide digital media services with the content.