Smartcard encryption cycling.

(54) Title: INTELLIGENT CARD ENCRYPTION CYCLE.

(54) Title: SMARTCARD ENCRYPTION CYCLING.

(57) Summary

Various provisions are presented for encrypting multiple television channels. A first television channel of a plurality of television channels to be protected by a first rights control message (ECM) using a first encryption scheme may be designated. The plurality of television channels can be transmitted using a single transponder stream. A second television channel may be designated from the plurality of television channels to be protected by a second encrypted ECM using a second encryption scheme while the first television channel from the plurality of television channels is protected using the first encryption scheme. The first and second ECMs can be transmitted to a plurality of television receivers. Data from the first ECM can be used to decrypt the first television channel over the plurality of television receivers. Data from the second ECM can be used to decrypt the second television channel by the plurality of television receivers.

(57) Abstract

Various arrangements for multiple encrypting television channels are presented. A first television channel of a plurality of television channels to be protected via a first entitlement control message (ECM) using a first encryption scheme may be designated. The plurality of television channels may be transmitted using a single transponder stream. A second television channel of the plurality of television channels to be protected via a second ECM encrypted using a second encryption scheme while the first television channel of the plurality of television channels is protected using the first encryption scheme may be designated. The first and second ECMs may be transmitted to a plurality of television receivers. Data from the first ECM may be used for descrambling of the first television channel by the plurality of television receivers. Data from the second ECM may be used for descrambling of the second television channel by the plurality of television receivers.

___I KNOW___

SCMWíU I heard BXWOMÍ *

<img file="MX337441B_D0001.tif" />

Mexican Institute of Industrial Property

<img file="MX337441B_D0002.tif" />

PATENT TITLE NO, 337441

<td>Headlines):</td><td>ECHOSTAR TECHNOLOGIES LLC</td>

<td>Home:</td><td>100 Inverness Terrace East, Englewood, Colorado, 80112, USA</td>

<td>Denomination:</td><td>CYCLE OF ENCRYPTION OF SMART CARD.</td>

Classification: lnt.CI.8: H04K1 / 02; H04L9 / 00; H04L9 / 10; H04N5 / 445; H04N7 / 167; H04N7 / 20

DAVID KUMMER; GERMAR SCHAEFER

<img file="MX337441B_D0003.tif" />

ncia: twenty

Vem date at d

industrial.

itl fraction V, 6 ° fraction lll, and 5 »of patent has urta will be subject to y 7 * bis 2 of the. and of the

6, 26/12/1997, &lt; '05/1999, &gt;/01/2006

Presentation date Inter March 2013

PRIORITY

Date:

March 20, | ϊ £ December_;S® March 14,

61/611,483 61/745,710 13/828,001

Janos

Law of the ntadón of the

Reference patent i grants

In accordance with article 23 of counted from the faith that of pre-rights

Whoever endorses the preser&gt; title does so on the basis of Industrial-Property (Day&gt; Official 01/26/2004, 06/16/2005,

I / 07/2004 / uaww / rwwxnrerp, 3 ', 4, 6 “rracciorrv subsection ajrib fractions i and my ju atsi tsanurr of the Mexican Institute of Industrial Property (DOF 12/27/1999, amended on 10/10/2002, 07/29/2004, 04/08/2004 and 09/13/2007); 1, 3 and 5 subsection a) of the Agreement that delegates powers to the Deputy Directors General, Coordinator, Divisional Directors, Holders of the Regional Offices, Divisional Deputy Directors, Departmental Coordinators and other subordinates of the Mexican Institute of Industrial Property. (DOF 12/15/1999, amended on 02/04/2000, 07/29/2004, 04/08/2004 and 09/13/2007).

IÍS I and lll / 07/2004

<img file="MX337441B_D0004.tif" />

the Federation (DOF) 05/02/2009.06 / 01/2010, 06/18/201 $ and 09/04/2012); Articles 1 ·, 3 'ration V armed the Organic

Issue Date: March 4, 2016

THE DIVISIONAL DIRECTOR OF PATENTS

<img file="MX337441B_D0005.tif" />

NAHANNY CANAL REYES

Arenal No. 550, Floor i,

Coi. Puebio Santa María Tepepsn,

Xochimilco, CP 16C20, Mexico City

Tel (55) 53 34 07 00 www impi oob.mx

<img file="MX337441B_D0006.tif" />

ΖοΗ / ϊΚβ

<img file="MX337441B_D0007.tif" />

<img file="MX337441B_D0008.tif" />

<img file="MX337441B_D0009.tif" />

SMART CARD ENCRYPTION CYCLE

DESCRIPTION OF THE INVENTION

A television viewer may wish to observe and / or record multiple television channels at the same time.

For example, during weekday prime time, many television programs can be broadcast simultaneously on different television channels that the television viewer wants to either watch live or store for later viewing. For many cable and satellite television distribution systems, a set top box can be used to receive, store, and display television channels on a television (or other form of display device). Such converter-decoder boxes may have limited capabilities 15 for concurrently displaying and / or storing multiple television channels at the same time.

In some modalities, a system is presented for the encryption of multiple television channels. The system can include one or more processors. The system may include memory communicatively coupled to and readable by one or more processors and having processor-readable instructions stored in it. When executed by one or more processors, the instructions may r

causing one or more processors to designate a first television channel 25 of a plurality of television channels to

<img file="MX337441B_D0010.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0011.tif" />

protect themselves by a first rights control message using a first encryption scheme. The plurality of television channels can be transmitted using a single transponder stream. The instructions may cause one or more processors to designate a second television channel of the plurality of television channels to be protected by a second encrypted rights control message using a second encryption scheme while the first television channel of the plurality of Television channels are protected using the first encryption scheme. The instructions may cause one or more processors to cause the first encrypted rights control message using the first encryption scheme and a second encrypted rights control message using the second encryption scheme to be transmitted to a plurality of television receivers. The data from the first rights control message can be used to decrypt the first television channel by the plurality of television receivers. The data from the second rights control message can be used to decrypt the second television channel by the plurality of television receivers.

Modalities of such a system may include one or more of the following: The first rights control message encrypted using the first encryption scheme may

<img file="MX337441B_D0012.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0013.tif" />

requiring further processing by a television receiver of the plurality of television receivers to decrypt the second encrypted rights control message using the second encryption scheme. The instructions may cause one or more processors to cause the plurality of channels to be transmitted concurrently to a plurality of television receivers using the single transponder stream. The data from the first rights control message may be required to decrypt the first television channel. The data from the second rights control message may be required to concurrently decrypt the second television channel for a period of time from the first television channel being decrypted. At any given time, only one television channel out of the plurality of television channels transmitted concurrently uses the simple transponder stream to protect itself using the first encryption scheme. The system may include a television receiver comprising a smart card, the television receiver is configured to decrypt the first rights control message, wherein the television receiver is from the plurality of television receivers. The television receiver can be configured to decrypt the second rights control message. The television receiver can be configured to decrypt the

<img file="MX337441B_D0014.tif" />

first television channel using the data from the first rights control message. The television receiver may be configured to decrypt the second television channel using the data from the second rights control message concurrently while decrypting the first television channel using the data from the first rights control message.

Additionally or alternatively, modalities of such a system may include one or more of the following: The television receiver that is configured to decrypt the first rights control message may take a longer period of time for the process of decrypting the second rights control. The instructions may cause one or more processors, after the television service provider has transmitted the first rights control message and the second rights control message: to designate the first television channel of the plurality of television channels to be protected by a third encrypted rights control message using the second encryption scheme; designate the second television channel of the plurality of television channels to be protected by a fourth encrypted rights control message using the first encryption scheme while the first television channel of the plurality of television channels is protected using the second scheme encryption;

rights control message second encryption scheme rights control

I Μ. MexicanoI Mexican Institute OF THE INDUSTRIAL AGE and cause the third encryption using the and the fourth encryption message using the first encryption scheme to be transmitted. The third rights control message can be used to decrypt the first television channel. The fourth rights control message can be used to decrypt the second television channel.

In some embodiments, a method of encrypting multiple television channels is presented. The method may include designating, via the television service provider system, a first television channel of a plurality of television channels to be protected by a first rights control message using a first encryption scheme. The plurality of television channels can be transmitted using a single transponder stream. The method may include designating, by means of the television service provider system, a second television channel of the plurality of television channels to be protected by a second encrypted rights control message using a second encryption scheme while the first channel Television of the plurality of television channels is protected using the first encryption scheme. The method may include

<img file="MX337441B_D0015.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0016.tif" />

transmitting, via the television service provider system, the first encrypted rights control message using the first encryption scheme and a second encrypted rights control message using the second encryption scheme to a plurality of television receivers. The data from the first rights control message can be used to decrypt the first television channel by means of the plurality of television receivers. The data from the second rights control message can be used to decrypt the second television channel by means of the plurality of television receivers.

Modalities of such a method may include one or more of the following: The first encrypted rights control message using the first encryption scheme may require more processing by a television receiver of the plurality of television receivers than decrypting the second message from Encrypted rights control using the second encryption scheme. The method may include transmitting, via the television service provider system, the plurality of channels concurrently to a plurality of television receivers using the single transponder stream. The data from the first rights control message may be required to decrypt the first television channel. The

INSTITUTO MEXICANO DE LA PROPIEDAD INDUSTRIAL data from the second rights control message may be required to concurrently decrypt the second television channel over a period of time from the first television channel being decrypted. At any given time, only one television channel out of the plurality of concurrently transmitted television channels using the simple transponder stream can be protected using the first encryption scheme.

The method may include decrypting, by means of a television receiver smart card, the first rights control message, wherein the television receiver is from the plurality of television receivers'. The method may include decrypting, via the television receiver's smart card, the second rights control message. The method may include decrypting, through the television receiver, the first television channel using the data from the first rights control message. The method may include decrypting, via the television receiver, the second television channel using the data from the second rights control message concurrently while decrypting the first television channel using the data from the first rights control message. Decrypting, through the television receiver's smart card, the first rights control message can take a period of

<img file="MX337441B_D0017.tif" />

INSTITUTO MEXICANO DE LA PROPIEDAD INDUSTRIAL longer than decrypting the second rights control message. The method may include, after the television service provider has transmitted the first rights control message and the second rights control message: designate, by means of the television service provider system, the first television channel of the plurality of television channels to be protected by a third encrypted rights control message using the second encryption scheme;

designate, by means of the television service provider system, the second television channel of the plurality of television channels to be protected by a fourth encrypted rights control message using the first encryption scheme while the first television channel of the plurality of television channels is protected using the second encryption scheme; and transmitting, via the television service provider system, the third encrypted rights control message using the second encryption scheme and the fourth encrypted rights control message using the first encryption scheme. The third rights control message can be used to decrypt the first television channel. The fourth rights control message can be used to decrypt the second television channel.

In some modalities,

<img file="MX337441B_D0018.tif" />

Γ<img file="MX337441B_D0019.tif" />IPI

Mexican Institute of Industrial Property

<img file="MX337441B_D0020.tif" />

a non-transient processor readable medium is presented to encrypt multiple television channels. The non-transient processor-readable medium may include processor-readable instructions configured to cause one or more processors to designate a first television channel out of a plurality of television channels to be protected by a first rights control message using a first encryption scheme. . The plurality of television channels can be transmitted using a single transponder stream. The instructions can be configured to cause one or more processors to designate a second television channel of the plurality of television channels to be protected by a second encrypted rights control message using a second encryption scheme while the first television channel of the plurality of television channels is protected using the first encryption scheme. The instructions can be configured to cause one or more processors to cause the first encrypted rights control message using the first encryption scheme and a second encrypted rights control message using the second encryption scheme to be transmitted to a plurality of receivers. television. The data from the first rights control message can be used to

<img file="MX337441B_D0021.tif" />

Β.

<img file="MX337441B_D0022.tif" />

MEXICAN INSTITUTE

OF THE INDUSTRIAL PKGHEDAD

<img file="MX337441B_D0023.tif" />

decryption of the first television channel by the plurality of television receivers. The data from the second rights control message can be used to decrypt the second television channel by the plurality of television receivers.

Modalities of such a non-transient processor readable medium may include one or more of the following: The first encrypted rights control message using the first encryption scheme may require further processing by a television receiver of the plurality of television receivers to decrypt than the second rights control message second encryption scheme.

encrypted using the

The instructions can be configured to cause one or more processors to cause the plurality of channels to be transmitted concurrently to a plurality of television receivers using the single transponder stream. The data from the first rights control message may be required to decrypt the first television channel. The data from the second rights control message may be required to concurrently decrypt the second television channel for a period of time from the first television channel being decrypted. At any given time, only one television channel out of the plurality of television channels transmitted concurrently using the

<img file="MX337441B_D0024.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0025.tif" />

Simple transponder can be protected using the first encryption scheme. The instructions can be configured to cause one or more processors, after the television service provider has transmitted the first rights control message and the second rights control message: designate the .first television channel of the plurality of TV channels

<td>to protect yourself</td><td colspan="2">through a third</td><td>Message from</td><td>control</td><td>of</td>

<td colspan="2">encrypted rights</td><td>using</td><td>the second</td><td>scheme</td><td>of</td>

<td>encryption;</td><td>designate</td><td colspan="3">the second television channel of</td><td>the</td>

<td>plurality of</td><td>channels</td><td>of TV</td><td>to protect yourself</td><td>through</td><td>a</td>

fourth encrypted rights control message using the first encryption scheme while the first television channel of the plurality of television channels is protected using the second encryption scheme; and causes the third encrypted rights control message using the second encryption scheme and the fourth encrypted rights control message using the first encryption scheme to be transmitted. The third rights control message can be used to decrypt the first television channel. The fourth rights control message can be used to decrypt the second television channel.

BRIEF DESCRIPTION OF THE DRAWINGS

A further understanding of modalities of

<img file="MX337441B_D0026.tif" />

'Mexican NSTITUtÍ OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0027.tif" />

Invention may be made with reference to the following figures. In the attached figures, components or similar characteristics may have the same reference label. In addition, various components of the same type can be distinguished by following the reference label with a hyphen and a second label that distinguishes between similar components. If only the first reference label is used in the specification, the description applies to any of the similar components that have the same first reference label independently of the second reference label.

FIGURE 1 illustrates one embodiment of a satellite television distribution system.

FIGURE 2 illustrates one embodiment of a converter-decoder box (STB).

FIGURE 3 illustrates one embodiment of a television service provider encryption system.

FIGURE 4 illustrates one mode of data transmission and encryption for distribution of satellite television channels.

FIGURE 5 illustrates an embodiment of multiple encryption schemes corresponding to multiple television channels.

FIGURE 6 illustrates another embodiment of multiple encryption schemes corresponding to multiple channels.

<img file="MX337441B_D0028.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0029.tif" />

of TV.

FIGURE 7 illustrates one embodiment of a method for using multiple encryption schemes to encrypt rights control messages (ECMs) within a single transponder stream.

FIGURE 8 illustrates an embodiment of a method for receiving multiple television channels corresponding to encrypted ECMs using multiple encryption schemes within a single transponder stream.

FIGURE 9 illustrates one embodiment of a computer system.

In some situations, a user (eg, a television service subscriber) may wish to watch and / or record multiple television channels concurrently. For example, while the user watches a first television program on a first television channel, the user may record a second television program on a second television channel using a digital video recorder (DVR). As such, the second television program may be available for presentation to the user (or someone else) at a later time. In some situations, instead of a user wanting to watch and / or record two television channels at any given time, three or more television channels can be watched and / or recorded simultaneously (for example, one television channel can be watched

<img file="MX337441B_D0030.tif" />

I<img file="MX337441B_D0031.tif" />PJ • Mexican nstitoto M THE INDUSTRIAL PROPERTY

<img file="MX337441B_D0032.tif" />

Such as three others are recorded concurrently).

This situation can be common in a home where multiple people each want to watch different television programs broadcast simultaneously. While in an ideal situation it may be possible to observe and / or record each concurrently available television channel, a limiting factor may be the television service receiving equipment. For example, for many television service providers, a set-top box (STB) is required to decrypt and / or decode television channels (and / or other related television services) from the television service provider for storage and / or or presentation by means of a presentation device (for example, a television). Such an STB may only be able to tune and / or decode a finite number of television channels simultaneously.

To control access to television channels distributed by the television service provider, television channels may be protected by the television service provider to prevent unauthorized (eg free) access from subscribers. In some embodiments, to achieve this goal, STBs contain a smart card that is used to decrypt rights control messages. A rights control message may contain data (possibly

<img file="MX337441B_D0033.tif" />

<img file="MX337441B_D0034.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0035.tif" />

called a control word (CW)), which is used to decrypt television channels. As such, to decrypt a television channel using a control word, the control word may need to be obtained from a corresponding ECM. An ECM may be encrypted and may need to be decrypted to obtain one or more CWs from the ECM.

These CWs can then be used to decrypt one or more television channels.

A smart card may have a finite ability to decrypt ECM. Such finite capacity may be due to the processing power of the smart card and / or other limitations on the smart card's ability to decrypt multiple ECMs over a given period of time. Such finite capacity may not be a problem when a single television channel is tuned in by an STB. However, if a user tries to watch and / or record multiple television channels simultaneously, the number of ECMs that require decryption for a given period of time may increase. For example, in some 20 modes, each television channel is associated with its own ECMs. Therefore, for a given period of time, a different ECM may need to be decrypted for each television channel that is received for presentation and / or recording. In some embodiments, a new ECM is decrypted for a television channel every ten seconds.

<img file="MX337441B_D0036.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0037.tif" />

If the STB receives five television channels, this may mean that five different ECMs will be decrypted every ten seconds.

While it may be possible to use multiple smart cards or a smart card with increased processing power to increase the number of ECMs that can be decrypted over a given period of time, it may be worthwhile, such as for cost reasons, to use a smart card with limited capabilities to decrypt ECMs. To increase the number of television channels that can be stored and / or recorded simultaneously, the number of ECMs that can be decrypted over a given period of time may need to be increased.

It should be understood that the data may be received by an STB from a television service provider in the form of one or more transponder streams; as such simultaneously or concurrently storing or recording multiple television channels may refer to a period of time given that it performs such functions for multiple television channels. For example, simultaneously or concurrently recording two television channels refers to performing functions related to recording two television channels transmitted during the same period of time (eg, 8:00 PM - 8:30 PM). During this period of time, ECMs may need to be decrypted

JL i

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY for each of the multiple television channels for the television channels that simultaneously or concurrently appear and / or record.

Instead of each television channel being protected by an encrypted ECM using the same encryption scheme, one or more channels to be protected by encrypted television ECMs can use a higher level of encryption (called other television channels as an encryption. An encrypted ECM that uses heavy encryption may require more processing to be decoded by an STB smart card than an encrypted ECM that uses a lower level of encryption (referred to as encryption to decode the desired ones to display may be enabling a smart card to

Related ECMs are decoded simultaneously, protected by multiple channels for

Storage ECM and / or encrypted TV channels using light encryption. Such lightly encrypted ECMs can be decrypted more quickly (eg, requiring less processing) by an STB decryption smart card. Some number of television channels can be protected by encrypted ECMs using heavy encryption that requires more time (for example, that requires more processing) to decrypt over the il

<img file="MX337441B_D0038.tif" />

MEXICAN INSTITUTE Dt THE INDUSTRIAL PROPERTY

<img file="MX337441B_D0039.tif" />

decryption smart card. A smart card may be able to handle decryption for a given number of television channels protected by heavily encrypted ECMs and lightly encrypted ECMs concurrently. As such, if only a limited number of television channels (for example, one) are received for recording and / or presentation, at any given time, are protected using heavy encryption, a smart card may be able to handle decryption of the Multiple television channel NDEs because most television channels are protected by

<td colspan="4">ECM with light encryption (which requires</td><td>less</td>

<td>processing</td><td>for what</td><td>the card</td><td>intelligent</td><td>the</td>

<td>decrypt).</td><td></td><td></td><td></td><td></td>

<td>Which</td><td>or which is it</td><td>Channels of</td><td>television</td><td>is it so</td>

<td>protected by</td><td colspan="2">ECM encrypted using</td><td>encryption</td><td>heavy</td>

<td>and light can</td><td>alternate.</td><td>For example,</td><td colspan="2">on a transponder</td>

Particularly used to transmit a transponder stream containing multiple television channels, at one point in time one of the television channels can be protected by an encrypted ECM using heavy encryption. Each different television channel in the transponder stream at any given time can be protected by encrypted ECMs using light encryption. After a predefined period of time, television channels

<img file="MX337441B_D0040.tif" />

MSTtTWO MEXICANO

OE INDUSTRIAL PRGi'ÍEDAD protected by an encrypted ECM using heavy encryption can alternate. As such, at any given time, in this example, only a single television channel transmitted on the transponder stream can be protected by an encrypted ECM using heavy encryption. Therefore, in an STB that receives at least part of the multiple television channels, a smart card may only need to decrypt an encrypted ECM that uses heavy encryption (with the other ECMs encrypted using light encryption) over a given period of time, thus allowing the smart card to decode all required ECMs in a timely manner.

Toggling which television channels in a television channel group are protected by an encrypted ECM using heavy or light encryption may be sufficient to protect all television channels. For example, while a non-subscriber (for example, a person making unauthorized access to the TV service provider's network) may have enough equipment to break light encryption, the equipment may not be enough to break heavy encryption. in a timely manner. If, for example, ten seconds of a television channel transmitted by the television service provider is protected by a heavily encrypted ECM (with the rest of the time being protected by a lightly encrypted ECM), the

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0041.tif" />

TV channel may become unpleasant for the non-subscriber because 10 seconds of every minute of the television channel's audio and / or video may not be able to be decrypted, thus ruining the viewing / listening experience of non-subscribers . Because each of the television channels could have ten seconds cut off for each minute protected by a heavily encrypted ECM, each of the television channels may become unpleasant for the non-subscriber.

Such arrangements can be especially useful when multiple television channels are watched and / or recorded from a single transponder stream. For example, a television service provider may group television channels that are similar to those desired by users to be watched and / or recorded concurrently on a single transponder stream. For example, a simple transponder stream can be used to carry each of the major television networks (eg ABC, CBS, NBC, and FOX). A simple tuner of an STB can be used to simultaneously receive each of the television channels transmitted on the same transponder stream. The television service provider can toggle which television channel of the channels in the transponder stream is protected by an ECM

I<img file="MX337441B_D0042.tif" />ΡΙ

Mexican Institute of Industrial Property

<img file="MX337441B_D0043.tif" />

encrypted by heavy and light encryption.

FIGURE 1 illustrates one embodiment of a satellite television distribution system 100.

Satellite television distribution system 100 may include: television service provider system 110, satellite transmission equipment 120, satellites 130, satellite disk antenna 140, converter-decoder box 150, and the television 160. Alternative modalities of the satellite television distribution system 100 may include fewer or more components. While only one satellite 140 disk antenna, the box

150 of set-top box, and television

160 (collectively referred to as user equipment) are illustrated, it should be understood that multiple (eg, tens, hundreds, thousands) instances of user equipment can receive television signals from satellites

130.

Television service provider system 110 and satellite transmission equipment 120 can be operated by a television service provider. A television service provider may distribute television channels, on-demand programming, programming information, and / or other services to users. The television service provider system 110 may be powered by one or more television channels from

<img file="MX337441B_D0044.tif" />

<img file="MX337441B_D0045.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY various sources. Such television channels can include multiple television channels that contain the same content (but can be found in different formats, such as high definition and standard definition). To distribute such television channels to users, the power of the television channels may be retransmitted to the user equipment by one or more satellites by transponder currents. Satellite transmission equipment 120 can be used to transmit a feed of one or more television channels from television service provider system 110 to one or more satellites 130. While a single television service provider system 110 and satellite transmission equipment 120 are illustrated as part of the satellite television distribution system 100, it should be understood that multiple instances of the transmission equipment can be used, possibly geographically distributed for communicating with satellites 130. Such multiple instances of satellite transmission equipment may communicate with the same or with different satellites. Different television channels can be transmitted to satellites 130 from different instances of transmission equipment. For example, a different satellite disk antenna from transmission equipment 120 can be used for communication with satellites in different positions.

<img file="MX337441B_D0046.tif" />

IMPI

MEXICAN IÑSTltUtO de t o&gt; KOWEDAD INDUSTRIAL orbitales.

Satellites 130 can be configured to receive signals, such as transponder currents from television channels, from one or more satellite uplinks such as satellite transmission equipment 120. Satellites 130 can retransmit signals received from satellite transmission equipment 120 (and / or other satellite transmission equipment) to multiple instances of user equipment using transponder currents. Different frequencies can be used for uplink transponder streams 170 from transponder stream 180. Satellites 130 can be in geosynchronous orbit. Each satellite 130 can be in a different orbital position, so that the signal path between each satellite, the uplink stations, and the user equipment varies. Multiple satellites 130 can be used to retransmit television channels from the television service provider system 110 to the satellite disk antenna 140. Different television channels can be carried using different satellites. Different television channels can also be carried using different transponders from the same satellite; thus, such television channels can be broadcast on different frequencies and / or different frequency ranges. As an example, a first and second television channels

<img file="MX337441B_D0047.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0048.tif" />

they can be carried on a first satellite transponder 130-1. A third, fourth, and fifth television channel may be carried using a different satellite or a different transponder from the same satellite by retransmitting the transponder stream at a different frequency. A transponder stream transmitted by a particular transponder on a particular satellite may include a finite number of television channels, such as seven. Accordingly, if many television channels are made available for viewing and recording, multiple transponder streams may be necessary to transmit all television channels to the instances of the user equipment.

Satellite disk antenna 140 may be a piece of user equipment that is used to receive transponder currents from one or more satellites, such as satellites 130. Satellite disk antenna 140 may be provided to a user for use. on a subscription basis for receiving television channels provided by the television service provider system 110, satellite uplink 120, and / or satellites 130. Satellite disk antenna 140 can be configured to receive transponder currents from multiple satellites and / or multiple transponders from the same satellite. Satellite disk antenna 140 can be configured to receive television channels by transponder currents in

<img file="MX337441B_D0049.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY multiple frequencies. Based on the characteristics of the converter-decoder box (STB) 150 and / or the satellite disk antenna 140, it may be possible to capture transponder currents from a limited number of transponders concurrently. For example, a STB 150 tuner

<td colspan="2">can only be able to</td><td>tune in to a</td><td>stream</td><td>of</td>

<td>transponder</td><td>simple from a</td><td>transponder</td><td colspan="2">single</td>

<td>satellite to the</td><td>time.</td><td></td><td></td><td></td>

<td>In</td><td>communication with</td><td>the antenna of</td><td>disc 140</td><td>of</td>

satellite, one or more sets of receiving equipment may be found. The receiving equipment can be configured to decode signals received from satellites 130 by satellite disk antenna 140 for display on a display device, such as television 160.

The receiving equipment may be incorporated as part of a television or may be part of a separate device, commonly referred to as a set-top box (STB). The receiving equipment may include a satellite tuner configured to receive television channels through a satellite. In FIGURE 1, the receiving equipment is presented in the form of a box

150 converter-decoder.

As such, the converter-decoder box can decode signals received by satellite dish antenna 140 and provide an output for television 160. FIGURE 2

<img file="MX337441B_D0050.tif" />

<img file="MX337441B_D0051.tif" />

I provide additional details of the reception team.

Television 160 can be used to present video and / or audio decoded by converter box 150. The converter-decoder box 150 can also produce a display of one or more interfaces to television 160, such as an Electronic Program Guide (EPG). In some embodiments, a display device other than a television may be used.

Uplink transponder stream 170-1 represents a signal between satellite uplink 120 and satellite 130-1. Uplink transponder stream 170-2 represents a signal between satellite uplink 120 and satellite 130-2. Each of the uplink transponder streams 170 may contain streams from one or more different television channels. For example, the uplink transponder stream 170-1 may contain a certain group of television channels, while the uplink transponder stream 170-2 contains a different grouping of television channels. Each of these television channels can be encrypted so that unauthorized persons are prevented from accessing the television channels.

Transponder current 180-1 represents a signal between satellite 130-1 and disk antenna 140 of

<img file="MX337441B_D0052.tif" />

ÜE LA '/ λΟΡΠ-ΌΑυ

INDUSTRIAL

<img file="MX337441B_D0053.tif" />

satelite. Transponder current 180-2 represents a signal path between satellite 130-2 and satellite dish antenna 140. Each of the transponder streams 180 may contain one or more different television channels in the form of transponder streams, which can be at least partially encrypted. For example, transponder stream 180-1 may include a first transponder stream containing a first group of television channels, while transponder stream 180-2 may include a second transponder stream containing a different group of channels. of TV. A satellite can transmit multiple transponder streams to user equipment. For example, a typical satellite can retransmit 32 transponder streams using corresponding transponders to the user equipment. In addition, spot beams are possible. For example, a satellite may be capable of transmitting a transponder stream to a particular geographic region (eg, to distribute local television channels to the relevant market). Different television channels can be transmitted using the same frequency of the transponder current to a different geographical region.

FIGURE 1 illustrates the transponder current 180-1 and the transponder current 180-2 that are received by the satellite disk antenna 140. For a

<img file="MX337441B_D0054.tif" />

INSTITUTO MEXiCANC DE LA P »O? IE» AD INDUSTRIAL

<img file="MX337441B_D0055.tif" />

<img file="MX337441B_D0056.tif" />

First group of television channels, satellite dish antenna 140 can receive a transponder stream from transponder stream 180-1; For a second group of channels, a transponder stream from transponder stream 180-2 can be received. STB 150 can decode the received transponder stream. As such, depending on which television channels are desired, a transponder stream from a different satellite (or a different transponder from the same satellite) can be accessed and decoded by STB 150. Furthermore, while two satellites are present in the satellite television distribution system 100, in other embodiments, larger or smaller numbers of satellites may be present to receive and transmit the transponder streams to the user equipment.

Network 190 can serve as a secondary communication channel between television service provider system 110 and set-top box 150. Through such a secondary communication channel, bidirectional data exchange can occur. As such, the data can be transmitted to the television service provider system 110 via network 190.

Data can also be transmitted from television service provider system 110 to STB 150 via network 190. Network 190 may be the Internet. While the

IM.PÍ

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0057.tif" />

Audio and video services can be provided to STB 150 via satellites 130, feedback d, from STB 150 to television service provider system 110 can be transmitted over network 190.

FIGURE 1 illustrates an example of a satellite television channel distribution system. It should be understood that at least part of the aspects of such a system may be similar to the cable television distribution system. For example, in a cable television system, instead of using satellite transponders, multiple RF channels can be used in one cable to transmit television channel currents. As such, detailed aspects herein may apply to cable television distribution systems.

FIGURE 2 illustrates a block diagram of one embodiment of a converter-decoder box 200. STB 200 may be the converter-decoder box 150 of FIGURE 1, or may be incorporated as part of a television, such as television 160 of FIGURE 1. The STB 200 may include: processors 210, tuners 215, network interface 220, non-transient computer readable storage medium 225, electronic program guide (EPG) 230, television interface 235, network information table 240 (NIT) , 245 digital video recorder (DVR), 250 user interface, 255 demultiplexer, 260 card

<img file="MX337441B_D0058.tif" />

INSTITUTO MEXICANO D £ LA INDUSTRIAL PROPERTY smart, and / or 265 decryption engine. In other STB 200 embodiments, fewer or more components may be present. It should be understood that the various components of the STB 200 can be implemented using hardware, firmware, software, and / or some combination thereof. For example, EPG 230 can be run by processors 210.

FIGURE 2 illustrates an embodiment of the STB 200, which typically can be in the form of a separate device configured to connect to a display device, such as a television. Modes of the STB 200 can also be referred to as a television receiver. In addition to being in the form of an STB, a television receiver can be incorporated into another device, such as a television. For example, a television may have an integrated television receiver (which does not involve an external STB that is coupled with the television). A television receiver may contain part or all of the components of the STB 200 and / or may be capable of performing part or all of the functions of the STB 200. Accordingly, the instances in this document refer to an STB and the steps that they are performed by an STB they may also be performed, more generally, by a television receiver.

Processors 210 may include one or more

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0059.tif" />

general-purpose processors configured to perform processes such as tuning to a particular channel, displaying the EPG, and / or receiving and processing input from a user. Processors 210 may include one or more general-purpose processors. For example, processors 210 may include one or more dedicated processors for decoding video signals of a particular format, such as MPEG, for producing and displaying on a television, and for performing decryption. It should be understood that the functions performed by various modules of FIGURE 2 can be performed using one or more processors. As such, for example, functions of decryption engine 265 can be performed by processor 210.

Tuners 215 can include one or more tuners used to tune in television channels, such as satellite or cable television channels. Each tuner contained in tuners 215 may be able to receive and process a single data stream from a satellite transponder (or a cable RF channel) at any given time. As such, a simple tuner can tune a simple transponder (or cable RF channel). If tuners 215 include multiple tuners, a tuner can be used to tune a television channel to a first transponder to be deployed using a television,

<img file="MX337441B_D0060.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0061.tif" />

while another tuner can be used to tune a television channel into a second transponder for recording and viewing at some other time. Yet another tuner can be used to check various television channels to determine if they are available or not. If multiple television channels broadcast on the same transponder stream are desired, a simple tuner of the tuners 215 can be used to receive the signal containing the multiple television channels for presentation and / or recording.

Network interface 220 can be used to communicate via an alternative communication channel with a television service provider. For example, the primary communication channel can be via satellite and the

<td colspan="2">alternative communication</td><td>(which</td><td>can</td><td>to be</td>

<td>can be</td><td>by means of a</td><td>network such</td><td>how</td><td>the</td>

<td>reference</td><td>back to</td><td>the figure</td><td>1, the</td><td>STB</td>

bidirectional)

Internet.

150 can communicate capable of with the 110 system

With being television services through a network,

Internet.

provider such as

This communication can be bidirectional:

data can be transmitted from the STB of the

150 to the television service provider system 110 and from the television service provider system 110 to the STB 150

Referring again to FIGURE 2 the

<img file="MX337441B_D0062.tif" />

MEXICAN INSTITUTE

OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0063.tif" />

Network interface 220 can be configured to communicate over one or more networks, such as the Internet, to communicate with the television service provider system 110 of FIGURE 1. Information can be transmitted and / or received via network interface 220 .

Storage medium 225 may represent a non-transient computer readable storage medium. The storage medium 225 may include memory and / or a hard disk. Storage medium 225 can be used to store information received from one or more satellites and / or information received via network interface 220. Storage medium 225 can store information related to EPG 230, NIT 240, and / or DVR 245. Recorded television programs can be stored using the storage medium 225.

The EPG 230 can store information related to television channels and the synchronization of programs that appear on such television channels. EPG 230 can be stored using non-transient storage medium 225, which can be a hard disk. The EPG 230 can be used to inform users of which television channels or shows are popular and / or to provide recommendations to the user. The EPG 230 can provide the user with a visual interface displayed by a television that allows a user to browse and select broadcast channels.

<img file="MX337441B_D0064.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0065.tif" />

television and / or television programs for viewing and / or recording via DVR 245. The information used to fill EPG 230 may be received via network interface 220 and / or via satellites, such as satellites 130 in FIGURE 1 via tuners 215. For example, updates to the EPG 230 may be periodically received via satellite. The EPG 230 can serve as an interface for a user to control the DVR 245 to enable the display and / or recording of multiple television channels simultaneously.

The audio / video decoder 233 can serve to convert encoded video and audio into a format suitable for production on a display device.

For example, the audio / video decoder 233 can receive video and audio in MPEG from the storage medium 225 or the decryption engine 265 to be produced on a television.

The audio / video decoder 233 can convert the video and audio into MPEG in an appropriate format to be displayed by a television or other form of display and audio device in an appropriate format to be produced from the speakers, respectively.

Television interface 235 may serve to output a signal to a television (or other form of display device) in a format suitable for the

<img file="MX337441B_D0066.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0067.tif" />

video display and audio playback. As such, television interface 235 may produce one or more television channels, television programming stored from storage medium 225 (eg, DVR 245 and / or information from EPG 230) to a television for presentation.

The network information table (NIT) 240 can store the information used by the converter-decoder box 200 to access various television channels. NIT 240 can be stored using storage medium 225. The information used to fill in the NIT 240 can be received by satellite (or cable) through the tuners 215 and / or can be received through the network interface 220 of the television service provider. As such, the information present in NIT 240 can be periodically updated. NIT 240 can be stored locally by STB 200 using storage medium 225. Information that may be present in NIT 240 may include: television channel numbers, a satellite identifier, a frequency identifier, a transponder identifier, an ECM PID, one or more audio PIDs, and a PID. Of video. (A second audio PID on a channel may correspond to a second audio program (SAP), which is in another language.) In some 25 modes, NIT 240 can be divided into tables

<img file="MX337441B_D0068.tif" />

<img file="MX337441B_D0069.tif" />

Mexican Institute of Industrial Property

<img file="MX337441B_D0070.tif" />

additional. For example, instead of specific audio PIDs and video PIDs being present in NIT 240, a channel identifier may be presented within NIT 240 which can be used to search for audio PIDs and video in another table.

Table 1 provides a simplified example of NIT 240 for various television channels. It should be understood that in other embodiments, many more television channels may be represented on NIT 240. NIT 240 may be periodically updated by a television service provider. As such, television channels can be reassigned to different satellites and / or transponders, and the STB 200 may be able to handle this reassignment while NIT 240 is being updated.

<td>Channel</td><td>satelite</td><td>Transponder</td><td>PID of ECM</td><td>PID of Audio</td><td>PID of Video</td>

<td> 4</td><td> 1</td><td> 2</td><td> 27</td><td> 1001</td><td> 1011</td>

<td> 5</td><td> 2</td><td> 11</td><td> 29</td><td> 1002</td><td> 1012</td>

<td> 7</td><td> 2</td><td> 3</td><td> 31</td><td> 1003</td><td> 1013</td>

<td> 13</td><td> 2</td><td> 4</td><td> 33</td><td> 1003, 1004</td><td> 1013</td>

Table 1

It should be understood that the values ​​provided in Table 1 are for example purposes only. Actual values, which include how satellites and transponders are identified, may vary. Additional information too

<img file="MX337441B_D0071.tif" />

can be stored in NIT 240. Additional information on how NIT 240, as indicated in Table 1, can be used is provided with reference to FIGURE 3. Video and / or audio for different television channels on 5 different transponders can have the same PIDs. Such television channels can be differentiated based on which satellite and / or transponder is tuned to which tuner.

The digital video recorder 245 (DVR) can allow 10 a television channel to be recorded for a period of time.

DVR 245 can store timers that are used by processors 210 to determine when a television channel should be tuned in and recorded on DVR 245 in storage medium 225. In some embodiments, a limited amount of storage medium 225 may be dedicated to DVR 245. Timers may be set by the television service provider and / or one or more users of the STB. The DVR 24 5 can be configured by a user to record particular television programs. Whether a user directly tunes to a television channel or DVR 245 tunes to a first television channel, NIT 240 can be used to determine satellite, transponder, ECM PID (packet identifier), audio PID, and PID Of video.

User interface 250 may include a control

<img file="MX337441B_D0072.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0073.tif" />

remote (physically separated from the STB 200) and / or one or more buttons on the STB 200 that allows a user to interact with the STB 200. User interface 250 can be used to select a television channel for viewing, view the EPG 230, and / or program DVR 245.

Referring again to tuners 215, television channels received via satellite (or cable) may contain at least some encrypted data. Audio and video packets can be encrypted to prevent unauthorized users (eg, non-subscribers) from receiving television programming without paying the television service provider. When a tuner from tuners 215 receives the data from a particular transponder on a satellite, the transponder stream may be a series of data packets corresponding to multiple television channels. Each data packet may contain a packet identifier (PID), in which, in combination with NIT 240, it can be determined to associate with a particular television channel. The particular data packets, called the rights control messages (ECM) can be transmitted periodically. ECMs can be encrypted; the STB 200 can use the smart card 260 to decrypt the ECMs.

an ECM can only be possible authorization to access the channel

Decryption of whether the user has a private television

I Ai PI

Mexican Institute of Industrial Property

<img file="MX337441B_D0074.tif" />

associated with the ECM. When | an ECM is received by the demultiplexer 255 and the ECM is determined to correspond to a television channel that is stored and / or displayed, the ECM may be provided to a smart card 260 for decryption.

When the smart card 260 receives an encrypted ECM from the demultiplexer 255, the smart card 260 can decrypt the ECM to obtain some number of control words. In some embodiments, from each ECM received by the smart card 260, two control words are obtained. In some embodiments, when the smart card 260 receives an ECM, it compares the ECM with the previously received ECM. If the two ECMs match, the second ECM is not decrypted because the same control words could be obtained. In other embodiments, each ECM received by the smart card 260 is decrypted; however, if a second ECM matches a first ECM, the produced control words will match; therefore, effectively, the second ECM does not affect the control words produced by the smart card 260.

When an ECM is received by the smart card 2 60, it may take a period of time for the ECM to decrypt to obtain the control words. As such, a period of time, such as 2 seconds, may pass before the control words indicated by the ECM

<img file="MX337441B_D0075.tif" />

can be obtained. Smart Card 260 can be permanently part of STB 200 or can be configured to be inserted and removed from STB 200.

When an ECM is received by the smart card 2 60, the smart card 260 may not need to know which encryption scheme (eg, a first or second encryption scheme) was used to encrypt the ECM. The encryption scheme can be determined by the number of bits present in the encrypted ECM. For example, an ECM encrypted with a higher number of bits may be indicative of heavy encryption, while an ECM encrypted with a lower number of bits may be indicative of light encryption. Regardless of the type of encryption, after receiving the encrypted ECM, the smart card can perform the necessary processing to produce the ECM control words. This may take a longer period of time for the smart card to produce the determined CWs of a heavily encrypted ECM than a lightly encrypted ECM. For an encrypted ECM that uses the heavy encryption scheme, decryption can take a longer period of time (and thus more processing) than an encrypted ECM that uses a light encryption scheme. Regardless of whether they get the CWs from a heavily encrypted ECM or an encrypted ECM

IMPI «MEXICAN NSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0076.tif" />

lightly deciphering audio and / or video can be done in the same way using the

CW by motor

265 decryption.

It should be understood through this why detailed modalities herein refer to heavy and light encryption, the encryption schemes used do not necessarily need to have one stronger encryption scheme than the other. For example, two encryption schemes may be different, without one being stronger than the other (however, one may take

As such, similar modalities can be created for use of a first encryption scheme and a second encryption scheme. Furthermore, it may be possible to use more than one encryption scheme, such as a light, medium and heavy encryption scheme.

If more than a number of television channels (eg 2) have their associated ECMs encrypted using heavy encryption, the smart card may not be able (due to programmed limits or

ECM fast enough for both television channels to be recorded and / or presented simultaneously.

Synchronization can be coordinated by the television service provider. Therefore, the smart card can receive combinations of encrypted ECMs from

<img file="MX337441B_D0077.tif" />

INSTITUTE VI

Μ LA τίοΐΪΗν, ο WüUOT.lIAL

<img file="MX337441B_D0078.tif" />

heavy form and lightly encrypted ECM that the smart card is known to be capable of decoding on time enough to allow simultaneous recording and / or presentation of associated television channels 5.

Demultiplexer 255 can be configured to filter data packets based on PIDs. For example, if a transponder data stream includes multiple television channels, the data packets that correspond to a television channel that is not intended to be stored or displayed by the user can be ignored by demultiplexer 255. As such, only data packets corresponding to one or more television channels to be stored and / or deployed can be passed to either decryption engine 15 265 or smart card 260, other data packets can be ignored. For each channel, a video packet stream, a packet stream of

<td>audio and / or a stream</td><td>of packages</td><td>of</td><td>ECM</td><td>they can</td><td>to be</td>

<td>present, each stream</td><td colspan="2">is identified</td><td>by</td><td colspan="2">a PID. In</td>

<td>20 some modalities, one</td><td>stream</td><td>of</td><td>ECM</td><td>common</td><td>can</td>

be used for multiple television channels. Additional data packets that correspond to other information, such as updates to NIT 240, can be properly routed by demultiplexer 255.

The decryption engine 265 can use the

<img file="MX337441B_D0079.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0080.tif" />

control words produced by the smart card 260 to decrypt video and / or audio corresponding to television channels for storage and / or presentation. The video and / or audio data contained in the transponder data stream received by tuners 215 can be encrypted. Video and / or audio can be decrypted by decryption engine 265 using a particular control word. Which control word produced by the smart card 260 can be used for successful decryption can be indicated by an encryption control identifier present within the data packet containing the encrypted video or audio. The decrypted video and / or audio may be produced by the decryption engine 265 for the storage medium 225 for storage (via the DVR 245) and / or the audio / video decoder 233 to be produced to a television or other display equipment by television interface 235.

For simplicity, the STB 200 of FIGURE 2 has been reduced to a block diagram, commonly known parts, such as a power supply, have been omitted. Furthermore, some routing between the various modules of the STB 200 has been illustrated. Such illustrations are for exemplary purposes only. Two modules that do not connect directly or indirectly do not indicate that the modules cannot communicate. Rather, the connections between

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY modules of the STB 200 seek common data routing.

indicate only possible

It should be understood that the STB 200 modules can be combined into a smaller number of modules or divided into a larger number of modules. Furthermore, the components of the STB 200 may be part of another device, such as integrated within a television. Also, while the STB 200 can be used to receive, store, and present television channels received by a satellite, it should be understood that similar components can be used to receive, store, and present television channels over a cable network.

FIGURE 3 illustrates one embodiment of a television service provider encryption system 300. The television service provider encryption system 300 may be part of the television service provider system 110 of FIGURE 1. As such, before the data is transmitted to the set-top box via satellite, the television service provider's encryption system 300 can be used to encrypt video and / or audio packets to prevent unauthorized users from accessing the programming of television. The encryption system 300 of the television service provider may include: television programming module 310, control word generator 320, system 300

<img file="MX337441B_D0081.tif" />

<img file="MX337441B_D0082.tif" />

INSTITUTE i ,.

LA Plí. '

INDUSTRIAL security, 340 multiplexer, 350 encryption engine, 360 transmitter, and 370 encryption synchronizer.

Television programming module 310 can receive television channels from multiple different sources, such as directly from networks that produce content on television channels. Each television channel that is transmitted on a particular transponder stream via a satellite transponder can be provided to multiplexer 340. Multiplexer 340 can create a digital packet data stream containing video, audio, and other data, such as ECMs, to be transmitted in the transponder data stream. The data stream, which includes video and / or audio data packets that are not encrypted, can be passed to the encryption engine 350. Encryption engine 350 can use a control word to encrypt video or audio present in a data packet. Some audio and video packages can also be passed without encryption, if desired by the television service provider.

The control word generator 320 can generate the control word that is used by the encryption engine 350 to encrypt the video or audio present in the data packet. Control words generated by control word generator 320 can be passed to security system 300, which can be operated by the iIlPI provider

<img file="MX337441B_D0083.tif" />

Generator-generated security provider used by the television service system or by a third party.

Control words

320 control word can

300 security to generate an ECM. Each ECM can indicate two control words. The indicated control words can be the current control word that is used to encrypt video and audio, and the control word that will be used to encrypt video and audio. Whether an ECM is created for the two control words using heavy or light encryption can be determined by the encryption synchronizer 370.

Encryption synchronizer 370 can determine which television channels are encrypted using heavy or light encryption and can control how heavy and light encryption cycles through the channels. For example, the encryption synchronizer 370 may receive the data from the multiplexer 340 (or some other source, such as an administrator of the television service provider) that indicates which television channels are transmitted using the same transponder stream.

In some embodiments, heavy encryption alternates between the television channels transmitted as part of the same transponder stream.

The encryption synchronizer 370 can

<img file="MX337441B_D0084.tif" />

providing security system 300 with an indication of which television channels should be associated with a heavily encrypted ECM and which television channels should be associated with a lightly encrypted ECM. The designation can change periodically, such as every ten seconds.

As an example, if TV channels 1, 2,

3, 4, and 5 are grouped together for transmission using a single transponder stream, multiplexer 340 can provide an indication of this group of television channels to encryption synchronizer 370, which can be operated by the television service provider or a third party entity which can operate the security system 300. Based on the group of television channels and having an indication of the number of heavily encrypted ECMs (eg one) that a STB smart card can handle over a given period, the encryption synchronizer 370 can provide an indication to the security system 300 of how the ECMs should be encrypted, as exemplified in Table 2.

<img file="MX337441B_D0085.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0086.tif" />

<td>Time (in seconds)</td><td>Television Channel 1</td><td>Television Channel 2</td><td>Television Channel 3</td><td>Television channel 4</td><td>Television Channel 5</td>

<td>Os-lOs</td><td>Heavy</td><td>Light</td><td>Light</td><td>Light</td><td>Light</td>

<td>10s-20s</td><td>Light</td><td>Heavy</td><td>Light</td><td>Light</td><td>Light</td>

<td>20s-30s</td><td>Light</td><td>Light</td><td>Heavy</td><td>Light</td><td>Light</td>

Table 2

Since the smart card processing capabilities of a television service provider's STBs can be known, the encryption synchronizer 370 can be configured so that a smart card no longer receives more heavily encrypted ECMs than the smart card can handle. for a given period of time (such as when a particular CW is needed to be decrypted by the STB, the CW has been decrypted from the ECM by the smart card and is available for use.)

Security system 300 can create and produce an ECM for multiplexer 34 0 for transmission to subscriber converter-decoder boxes based on the encryption scheme indicated by encryption synchronizer 370 and the CWs indicated by generator 320 of control word. Every data packet, whether it contains audio, video, an ECM, or some other form of data, can be associated with a PID. PIDs can be used by the converter-decoder box in

I

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0087.tif" />

<img file="MX337441B_D0088.tif" />

Je ¿í J combination with the network information table to determine which television channel contains the data within the corresponding data packet. After the video and audio contained within the data packets have been encrypted by encryption using a CW engine 350, the transponder data stream can be transmitted by transmitter 360 to a satellite, such as satellite 130-1 from FIGURE 1, for retransmission to subscriber converter-decoder boxes, such as STB 150. Accordingly, the transponder data stream transmitted by transmitter 360 contains encrypted video packet streams and audio packet streams, and also contains an encrypted ECM packet stream which, when decrypted, provides the control words. necessary to decrypt encrypted video and audio packets.

For simplicity, the encryption system 300 of the television service provider of FIGURE 3 has been reduced to a block diagram, other common components have been omitted. Furthermore, some routings between the various modules of the encryption system 300 of the television service provider have been illustrated. Such illustration is for exemplary purposes only. Regardless of whether two modules are connected directly or indirectly, the modules may be able to communicate. The connections between modules aim for possible commons.

Must indicate television encryption system 300 can be divided into

Transmission distribution

FIGURE 4, illustrates.

packages

<img file="MX337441B_D0089.tif" />

only understood that the modules of the combine in a greater number of

FIGURE 4 channel data a service provider stream of a smaller number of modules or modules.

illustrates a modality of an and encryption scheme for

400 transponder data

At least some data contained in data from stream 400 within the transponder data is encrypted using control words.

In some embodiments, at least the audio and video data contained within the data packets are encrypted using control words.

With reference to the current

400 of transponder data, the video and audio packets transmitted during a first period 410-1 of time are encrypted using a first control word. Video and audio transmitted over a second period 410-2 of time are encrypted using a second control word. Video and audio transmitted during a third period 410-3 of time are encrypted using a third control word, and so on. To decrypt the video and audio received during a particular period of time, the appropriate decryption control word must be used.

<img file="MX337441B_D0090.tif" />

or exemplary audio. The data packet 420 may contain at least: PID 430, synchronizer 440, encryption control 450, and payload 460. The package packet header (which may be an MPEG packet) can include PID 430, synchronizer 440, and encryption control 450. PID 430 can be a packet identifier used to indicate the particular television channel (or other data type, such as an ECM) with which the data packet is associated. Multiple video packets associated with the same PID can be referred to as video packet streams, similarly for ECMs and audio packets. Referring again to Table 1, if attempting to access a particular television channel, such as television channel four, using the

NIT, the STB may be able to determine that a data packet with a

PID of 1001 corresponds to the audio for channel 4, a data packet with a PID of

1011 corresponds to video for channel 4, and an ECM for data packet with a PID of 27 corresponds to

<td>the</td><td>Channel 4.</td><td>The</td><td colspan="2">synchronizer</td><td> 440</td><td colspan="2">can contain</td>

<td>of</td><td>bits that</td><td>I know</td><td>they use</td><td>for</td><td colspan="2">sync up</td><td>with the</td>

<td colspan="2">transport.</td><td>The</td><td>control</td><td> 450</td><td>of</td><td>encryption</td><td>can</td>

some current number to serve to indicate which control word, if any, should be used to decrypt payload 440. In some embodiments, encryption control 450 may indicate either

<img file="MX337441B_D0091.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY that an even control word or an odd control word can be used for decryption. In a video or audio package, payload 460 can contain encrypted video or audio, respectively.

When a data packet indicating a PID is received that corresponds to an ECM of a television channel that you want to record or watch, the ECM encrypted in the payload can be passed to a smart card for decryption. As the control word used to decrypt changes over time, so does the ECM. Each ECM can contain the control word currently used to decrypt and the control word to be used to decrypt next. As such, an ECM can contain a control word that is the same as the previous ECM and a new control word. For example, an ECM can be represented in a format of (CW_pair, CW_odd). Whether the odd or even control word is used to decrypt the encrypted control identifier present within a data packet can be based.

During the period 410-1 of time the odd control word, CWi, can be used to decrypt. During this time period, the same ECM can be received multiple times (which can allow a converter-decoder box that tuned the transponder current to access television channels using

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0092.tif" />

ECM CWs as soon as the ECMs are decrypted and the CW is recovered.) This ECM p₍Can include (CWi, CW₂) encrypted. As such, the ECM indicates the current control word (CWi) and the next control word to be used (CW₂). During the 410-1 time period the data packets containing the encrypted data may have encryption control bits indicating the odd control word to be used for decryption, as such CW_X can be used for decryption.

Beginning at the beginning of the 410-2 time period, the encryption control bits of a data packet containing encrypted video or audio may indicate the peer control word to be used, as such CW₂ can be used for decryption. Once the 410-2 period of time starts, and the CW control word_X no longer used for decryption, a different ECM can be transmitted to the STB indicating the current control word and the next control word to be used. This ECM may be periodically transmitted during the period 410-2 of time, such as every tenth of a second. At this time, the ECM can indicate: (CW3, CW₂). As such, the current control word CW₂ it remains the same and continues to be used for decryption for the 410-2 period of time during which the data packets indicate, by their encryption control bits, that the peer control word can be used

<img file="MX337441B_D0093.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0094.tif" />

e for decryption. When decrypted, the new ECM indicates a new odd control word, CW₃, which can be used for decryption when the encryption control bits indicate that the odd control word should be used for decryption. This process can continue, with decryption switching between odd and even control words while the STB is tuned to the transponder current. In some embodiments, the period of time during which any particular control word is used may be approximately 10 seconds. Such a period of time may allow ample time for a smart card to decrypt an ECM so that the next control word to be used will be decrypted by the smart card before the received data packets are indicated by the control bits of encryption, that that next control word can be used for decryption.

The transponder data stream 400 can contain audio and video for multiple television channels, the packets of which can be indicated by different PIDs. In FIGURE 4, a single CW is shown as used for discrete time periods, however it should be understood that different CWs can be decrypted from different ECMs for different television channels. As such, the illustration of CWs one through five may be for &amp; ivi I^{, N3t}™ to Mexican \ Dt LA FROFIEDAD

INDUSTRIAL

<img file="MX337441B_D0095.tif" />

While other CWs use the current of one (or more than one) television channel for others, (decrypted from other ECMs) can television channels within transponder.

While data packet 420 indicates only PID 430, synchronizer 440, encryption control 450, and payload 4 60 as parameters that are present, it should be understood that data corresponding to other parameters may be present, such as other parameters header. Furthermore, based on the mode, the number of bits or bytes present in the encryption control 450, the payload 460, the PID 430, the synchronizer 440 and / or any other parameter may vary. The boxes present in data packet 420 are not intended to represent a particular number of bits or bytes.

FIGURE 5 illustrates an embodiment of multiple encryption schemes of the ECM 500 corresponding to multiple television channels. While the transponder stream 400 of FIGURE 4 represents all the data packets received by a transponder stream, FIGURE 5 illustrates audio and video packets ordered according to the television channel. As such, each of the television channels one through four may have been received as part of the same transponder stream or in different transponder streams. The channels of

<img file="MX337441B_D0096.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0097.tif" />

television one through four may have been received as part of the transponder stream 400. The multiple encryption schemes of the ECM 500 can be determined by the security system 300, the control word generator 320, and the encryption synchronizer 370 of the television service provider that encrypts the television channels and encrypts the ECMs earlier. transmission to each of the users' converter-decoder boxes.

In FIGURE 5, the multiple encryption schemes of the ECM 500 are illustrated in the time domain. Group 510 of audio / video data packets can be received by a converter-decoder box between 0 seconds and 10 seconds. During this same time period, groups 515, 520, and 525 of audio / video data packets can also be received by the converter-decoder box. If received as part of the same transponder stream, each of these packets may be received at slightly different times within the period of time between 0 and 10 seconds. In order to decode some or all of these groups of audio / video data packets, the ECMs received by a set top box may need to be decrypted to obtain control words necessary to decrypt the audio / video packets associated with each television channel. Received

<img file="MX337441B_D0098.tif" />

One or more of the ECMs corresponding to television channel one can be found within group 510 of audio / video data packets (or at some earlier time). Received among group 515 of audio / video data pays (or at some previous time) one or more of the ECMs corresponding to television channel two may be found. Received between the audio / video data packets 520 (or sometime before) may be one or more of the ECMs corresponding to television channel three. Received between the audio / video data packets 520 (or at some earlier time) one or more of the ECMs corresponding to television channel four may be found. For a particular television channel to be presented (such as by a television) and / or recorded (such as by a DVR), the television channel's audio / video data packets may need to be decrypted using a control word obtained from a ECM that corresponds to the television channel.

Each ECM received by the STB can be encrypted. While each ECM can be encrypted, the encryption scheme for one or more of the ECMs may vary. In FIGURE 5, groups of audio / video data packets required to be decrypted using a control word obtained from a heavily encrypted ECM are in bold. Therefore, group 510 of data packets of

IMPI

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0099.tif" />

Audio / Video requires a control word obtained from a heavily encrypted ECM for decryption. The remaining television channels during the same period of time may use a different encryption scheme. Clusters 515, 520, and 525 of audio / video data packets each use light encryption during this time period of 0 to 10 seconds. Therefore, during the time period of 0 seconds to 10 seconds, only television channel one has video / audio data packets that require a control word to decrypt from a heavily encrypted ECM; TV channels two, three, and four have audio / video data packets that require lightly encrypted ECM control words. Therefore, in order to obtain the necessary control words to decrypt channels one through four during the time period of 0 seconds to 10 seconds, a smart card of a converter-decoder box may only need to decrypt a single encrypted ECM. heavy and three lightly encrypted ECMs.

During the time period of 10 seconds to 20 seconds, in which the television channel requires a control word from a heavily encrypted ECM has been alternated. Groups 530, 540, and 545 of audio / video data packets are decrypted using control words obtained from lightly encrypted ECMs. The

IMPI

<img file="MX337441B_D0100.tif" />

<img file="MX337441B_D0101.tif" />

Audio / video data packets from group 535 of audio / video data packets are decrypted using a decrypted control word from a heavily encrypted ECM. Therefore, for the time period of 10 seconds to 20 seconds, a smart card from a converter-decoder box again is only required to decrypt a single heavily encrypted ECM and three lightly encrypted ECMs, albeit during this time. period of time the television channel decrypted using a decrypted control word from a heavily encrypted ECM has changed. This pattern can continue for groups of audio / video data packets

<td>add it;</td><td colspan="3">s later</td><td>in</td><td>time</td><td colspan="2">so</td><td>than</td><td>the</td>

<td>groups of</td><td>packages</td><td>of</td><td>data</td><td>of</td><td>audio Video</td><td>for</td><td>the</td><td>channel</td><td>of</td>

<td>television</td><td>three and</td><td>the</td><td>channel</td><td>of</td><td>television</td><td>four</td><td colspan="2">too</td><td>I know</td>

they associate with an encrypted ECM using heavy encryption. In the illustrated embodiment, in 40 seconds, after each of the television channels has been associated with an encrypted ECM using heavy encryption, the audio / video data packets associated with channel one may again need to be decrypted using a control word obtained from a heavily encrypted ECM. As such, group 550 of audio / video data packets may require that a control word be obtained from a heavily encrypted ECM, whereas groups 555, 560,

<img file="MX337441B_D0102.tif" />

INSTITUTO λι! ·· Χί £ ΛΚΟ DE LA HIAPIEDAD INDUSTRIAL

<img file="MX337441B_D0103.tif" />

and 565 packets of audio / video data require lightly encrypted ECM control words for decryption. Regardless of whether the control words are derived from a heavily or lightly encrypted ECM, the decryption process using CWs can remain the same across television channels.

Each of television channels one through four can be transmitted using a single transponder stream. As such, if a converter-decoder box has been configured to display and / or store part or all of the television channels transmitted using a particular transponder stream, the encryption of the ECMs for each television channel may be synchronized since the card STB Smart has only a limited number of heavily encrypted ECMs to decrypt for a given period of time (such as one every ten seconds). As such, it can be ensured that a smart card receives the ECMs it can decrypt to obtain the CWs in time to decrypt the associated television channels.

In the illustrated embodiment of FIGURE 5, four television channels are presented with a heavily encrypted ECM that is associated with each television channel in sequence; this provision is for example purposes only. The number of television channels through which

<img file="MX337441B_D0104.tif" />

₆₁ IMPI

MEXICAN INSTITUTE

OF THE PROPERTY

INDUSTRIAL may occur The heavy / light encryption cycle may vary. For example, heavy / light encryption can cycle through each television channel on a particular transponder stream. Also, the cycle may not need to be in a sequential form, which is illustrated. Also, the period of time after which the cycle occurs can vary by modality (for example, one cycle every 30 seconds instead of every 10 seconds). The number of television channels that can be concurrently associated with heavy encryption can vary. For example, this may be based on the capabilities of a smart card in the converter-decoder boxes. In some embodiments, one, two, three, or more television channels may be associated with a heavily encrypted ECM and may be decrypted by a smart card in a timely enough manner to allow control words to be obtained to decrypt data packets. audio and video.

FIGURE 6 illustrates another embodiment of multiple encryption schemes of ECM 600s corresponding to multiple television channels. While the transponder stream 400 of FIGURE 4 represents all data packets received by a transponder stream, FIGURE 6, like FIGURE 5, illustrates classified audio and video packets (for display purposes) according to television channels. As such, each of

<img file="MX337441B_D0105.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0106.tif" />

television channels one through four in FIGURE 6 may have been received as part of the same transponder stream or in different transponder streams. Television channels one through four may have been received as part of the transponder stream 400. The multiple encryption schemes of the ECM 600 may be designated by the security system 300, the control word generator 320, and the encryption synchronizer 370 of the television service provider that encrypts the television channels and encrypts the ECMs before transmit it to each of the users' decoder boxes. The multiple encryption schemes of the ECM 600 may represent an alternative modality for the multiple encryption schemes of the ECM 500 of FIGURE 5.

In multiple encryption schemes of the ECM 500 of FIGURE 5, from a group of four television channels, heavy and light encryption has one cycle for each television channel individually. In some embodiments, the same ECM, whether encrypted using heavy or light encryption, can be used to obtain CWs to decrypt more than one television channel. For example, referring to Table 1, it may be possible to assign multiple television channels to the same ECM PID (for example, television channels 4 and 5 could

<img file="MX337441B_D0107.tif" />

<img file="MX337441B_D0108.tif" />

INSTITUI'O MEXίC / \ NO OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0109.tif" />

assign each one an ECM PID of 27). Therefore, ECMs with the same PIDs should be used to obtain the CWs for each television channel. In the multiple encryption schemes of the ECM 600, two television channels are assigned to each ECM. Television channel one and two correspond to the first ECM PID and television channels three and four correspond to a second ECM PID

ECM. Therefore, instead of needing to decrypt four ECMs for each time period (in this example, 10 seconds), you only need to decrypt two ECMs for each time period.

In FIGURE 6, the multiple encryption schemes of the ECM 600 are illustrated in the time domain. Group 610 of audio / video data packets can be received by a converter-decoder box between 0 seconds and 10 seconds. During this same time period, groups 615, 620, and 625 of audio / video data packets can also be received by the converter-decoder box. The audio and video packets for each television channel can be distinguished by different PIDs, as presented in Table 1. However, the control words used to encrypt each television channel can match between channels one and two and between channels three and four so that an ECM can be decrypted to get the control word for

<img file="MX337441B_D0110.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0111.tif" />

channels one and two, and an ECM can be decrypted to obtain the control word for channels three and four. Each data packet may be received at slightly different times within the period of time between 0 and 10 seconds. One or more ECMs corresponding to television channels one and two may be scattered within the transponder stream. One or more ECMs corresponding to television channels three and four may be scattered within the transponder stream. Based on the PIDs in the NIT (or some other locally stored Table), the STB can determine that an ECM stream associated with a particular PID is associated with multiple television channels. In order for a particular television channel to be presented (such as through a television) and / or recorded (such as through a DVR), the audio / video data packets of the television channel

<td>they may need</td><td colspan="2">decipher</td><td>using a</td><td colspan="2">word</td><td>of</td>

<td>control obtained</td><td>of</td><td>an ECM</td><td>that corresponds</td><td>to the</td><td>channel</td><td>of</td>

<td>television.</td><td></td><td></td><td></td><td></td><td></td><td></td>

<td>Like in</td><td>the</td><td>FIGURE</td><td>5, packages</td><td>of</td><td>data</td><td>of</td>

Audio / Video associated with CWs obtained from a heavily encrypted ECM are in bold. As such, groups 610 and 615 of audio / video data packets require a control word to decrypt a heavily encrypted ECM; groups 620 and 625 packets

<img file="MX337441B_D0112.tif" />

<img file="MX337441B_D0113.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0114.tif" />

Audio / video data requires a control word to decrypt a lightly encrypted ECM. Because multiple television channels share the ECMs, for the

<td>period of</td><td>weather</td><td>of 0</td><td>s</td><td>- 10 s,</td><td colspan="2">only</td><td>they need</td>

<td colspan="2">5 decrypt two</td><td>ECM.</td><td>Others</td><td colspan="2">modalities</td><td>they can</td><td>use</td>

<td>variations</td><td>at</td><td>theme</td><td>of</td><td>use</td><td>a</td><td>same</td><td>ECM for</td>

multiple television channels. For example, television channels one, two, and three can use the same ECM stream, while television channel four 10 uses a different ECM stream.

For the time period of 10 s - 20 s, the encryption scheme can be alternated so that the ECM used to obtain the control words for groups 64 0 and 64 5 of audio / video data packets is encrypted from heavy form, while the ECM used to obtain the control words for groups 630 and 635 of audio / video data packets is lightly encrypted.

For the 20 s - 30 s time period, the encryption can be toggled back to the same arrangement as in the first time period. As such, the ECM used to obtain the control words for the 650 and 655 groups of audio / video data packets is heavily encrypted, while the ECM used to obtain the control words for the 660 and 665 groups of packets audio / video data 25 is lightly encrypted. In such modality, each channel of

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0115.tif" />

Television is protected by a heavily encrypted ECM for 50% of the time. However, the STB smart card may have to do less general processing because only two ECMs are needed for all four television channels. In some embodiments, because fewer ECMs need to be decrypted, a heavier level of encryption can be used for each ECM (which can take a STB smart card more time to decrypt). Such an arrangement may be preferred because it may be more difficult for a non-subscriber to break a heavier encrypted ECM used for multiple television channels than a lightly encrypted ECM used for fewer (eg, one) channels. of TV.

From the modalities of FIGURES 5 and 6, it may be possible to determine other encryption schemes that can be used on multiple television channels which can be transmitted as part of the same transponder stream. While the above description focuses on heavy and light encryption, such modalities can be applied more generally to first and second encryption schemes. As such, instead of an encryption scheme that is more difficult to decrypt, different encryption methods can be presented for each encryption scheme. The number of television channels and

<img file="MX337441B_D0116.tif" />

<img file="MX337441B_D0117.tif" />

i- I ^{, NS}T &lt;TUT ° MEXICAN PE LA FROrtEDAD

INDUSTRIAL

<img file="MX337441B_D0118.tif" />

the length of the time periods used are for example purposes only. Furthermore, in some embodiments, more than two encryption schemes can be used to encrypt ECMs.

The various encryption schemes and systems described herein can be used to perform various methods. FIGURE 7 illustrates one embodiment of a method 700 for uti multiple encryption schemes for encrypting rights control messages (ECMs) within a transponder stream. Method 700 can be performed by a television service provider system to transmit television channels to STBs via satellite, as presented in system 100 of FIGURE 1. Method 700 can also be applied to a television distribution system by cable. At least some steps of method 700 can be performed using a computer system. The television service provider system 300 of FIGURE 3 can be used to perform at least part of the method 700 steps. As such, the means for performing the method 700 may include one or more computers and / or any of the components of systems 100, 200, and / or 300.

In step 710, a group of television channels can be selected to transmit to multiple STBs using a single transponder stream. When using

<img file="MX337441B_D0119.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0120.tif" />

For a simple transponder stream, it may be possible to use a simple tuner in a set-top box to receive each of the television channels. In a satellite television distribution system, groups of television channels can be transmitted to the user equipment by multiple transponders which can be located on one or more satellites. Television channels can be grouped into particular transponder streams based on television channels that a subscriber may be likely to want to watch and / or record at the same time. As such, the amount of hardware needed in the converter-decoder box can be minimized by having such television channels transmitted on the same transponder stream.

In step 720, within the group of television channels selected in step 710, a first television channel may be designated to be protected by a first ECM that is encrypted using a first encryption scheme. For example, this first encryption scheme may be heavy encryption which takes more time to decrypt by a set-top box than an ECM encrypted using light encryption. In step 730, within the group of television channels selected in step 710, a second television channel may be designated to be protected by a

<img file="MX337441B_D0121.tif" />

INSTITUTE _{Mtx¡c /}.

OF THE ÍROFIEJ INDUSTR

<img file="MX337441B_D0122.tif" />

second ECM that is encrypted using a second encryption scheme. As an example, if the group of television channels selected in step 710 includes 6 television channels, one of the television channels can be selected to protect itself using an encrypted ECM that uses a first encryption scheme while the other five Television are protected using ECMs that are encrypted using a second encryption scheme. This second encryption scheme may be a light encryption scheme which takes less time and / or less processing to decrypt than an ECM encrypted using heavy encryption. As a simple example, heavy encryption can be 128-bit encryption while light encryption can be 64-bit encryption. The designations of steps 720 and 730 may be for a predefined period of time after which the encryption may be toggled because television channels are protected using other encryption schemes.

In step 740, the first encrypted ECM and the second encrypted ECM can be created. The first encrypted ECM can be created according to the first encryption scheme and the second encrypted ECM can be created according to the second encryption scheme. Each encrypted ECM can be created to contain control words *

<img file="MX337441B_D0123.tif" />

INSTITUTO MEXIC- NO &lt;DELA PROPIEDAD&gt; INDUSTRIAL that are provided to the component that creates the ECM. An indication can also be provided to the component that creates the ECMs as the encryption scheme to be used to encrypt the ECM. In some embodiments, each ECM contains two control words. With reference to FIGURE 3, security system 300 can be used to create ECMs. Security system 300 may be operated by the television service provider or by a third party provider. The television service provider or third party provider may operate a control word generator that creates the control words which are used to encrypt the television channels. These control words along with input from the encryption synchronizer, which can specify the encryption scheme to be used to encrypt the control words, can be used by the security system to create the encrypted ECMs using the first and second encryption schemes. .

In step 7 50, the first encrypted ECM and a second encrypted ECM can be transmitted to the multiple converter-decoder boxes. Referring to FIGURE 1, a satellite television distribution system can be used to transmit the first and second ECMs for multiple converter-decoder boxes. The first and second encrypted ECMs can be transmitted to boxes

<img file="MX337441B_D0124.tif" />

converter-decoder in a transponder stream containing data packets associated with television channels for audio and video. Such a stream (the transponder may also include data used to update a table stored in the decoder converter box and / or provide other services to subscribers.

In step 7 60, the audio and video packets corresponding to the first television channel and the second television channel can be transmitted to the decoder converter boxes possibly using the simple transponder stream. During a given period of time, such as a 10 second period, the audio and video data packets corresponding to each television channel can be transmitted as part of the transponder stream. During this period of time, the converter-decoder box may have the ability to record and / or display any television channel. As such, the first television channel and the second television channel are considered concurrently transmitted and concurrently received. For example, during the same period of time, such as from 8 PM to 8:30 PM, any television channel can be tuned to different television programs. The first television channel can be encrypted using one or more encrypted control words i

<img file="MX337441B_D0125.tif" />

<img file="MX337441B_D0126.tif" />

in the first ECM. The second television channel may be encrypted using one or more encrypted control words in the second ECM. Accordingly, to decrypt the first and second television channels, the encrypted ECM using the first encryption scheme and the second encrypted ECM using the second encryption scheme may need to be decrypted by a set-top box. Such decryption can be done by the smart card in the converter-decoder box. By using two different encryption schemes, the amount of processing required to be done in the converter-decoder box can decrease. Such a decrease in processing may allow control words to be obtained from decrypting the channels of the ECMs in time to allow corresponding television when the control words have begun to be used to encrypt the television channels.

can can

At step 770, alternate. Toggle imply that

ECM schemes the schemes of which encryption encryption previously encrypted using the first encryption scheme are now encrypted using the second encryption scheme. Similarly, the

ECMs that were previously encrypted using the second encryption scheme can now be encrypted using the first encryption scheme. By

<img file="MX337441B_D0127.tif" />

<img file="MX337441B_D0128.tif" />

therefore, when method 700 is repeated, in step 720, the second encryption scheme can be used and in step 730 the first encryption scheme can be used. Such an alternation can allow each television channel in different periods of time to be encrypted using each encryption scheme. It may not be necessary for the television service provider to provide some indication of which encryption scheme is used for which ECM to an STB. Based on the properties of the ECM, a 10 smart card in a converter-decoder box may be able to determine the processing required to decrypt the ECM.

FIGURE 8 illustrates one embodiment of a method for receiving multiple television channels corresponding to 15 encrypted ECMs using multiple encryption schemes within a single transponder stream. Method 800 can be performed by a set-top box that receives television channels through a satellite dish antenna and a satellite, as presented in system 100 of FIGURE 1. Method 800 can also be applied to a cable television distribution system, such as via an STB that receives RF cable television service. At least some steps of method 800 can be performed using a computer system. The STB 200 in FIGURE 2 can be used to

<img file="MX337441B_D0129.tif" />

Perform at least part of the 800 method steps. As such, means to perform the 800 method may include one or more computers and / or any of the components of the 100, 200, and / or 300 systems. Method 800 can be performed by a method box 700 that is televised.

In the converter-decoder following the performed by a provider step 810, a first of

Encrypted ECM using a per box first encryption scheme can be received from encrypted this period, determine whether encrypted television television encrypted converter-decoder.

contain box of the first ECM

The first ECM is a decrypted PID. Converter-decoder-based encryption can be associated with a channel that is presented and / or stored. If it is not displayed or stored, it can be ignored. However, if it is associated with a channel, it produces for its presentation television) and / or decoder, within the decryption.

(by stores the first box of

The first for

ECM is the first television channel that I example, by

ECM

ECM if a encrypted converter box can be routed converter-decoder to

Encrypted ECM can be routed to a smart card within decryption.

converter-decoder box for example of method 800, it is assumed that the first ECM

For encryption

V

NS lNSnríitc;

DELA PÜOKEDAD

1NDII5TRÍAL

Γ Γ · ** is associated with a television channel that is produced for presentation and / or recording by the set-top box. The first encrypted ECM can be received as part of a transponder stream containing multiple television channels that are grouped together into a single transponder stream by the television service provider.

In step 820, the first encrypted ECM can be decrypted by the converter-decoder box. Decryption can be done by a smart card in the converter-decoder box. As such, the first encrypted ECM can be routed within the converter-decoder box to the smart card for decryption. When the first encrypted ECM is received by the smart card, the smart card can process the first encrypted ECM until it is decrypted. Once it is successfully decrypted, two control words can be obtained from the first encrypted ECM. The smart card may be able to determine the appropriate way to decrypt the first encrypted ECM regardless of whether the ECM is encrypted using the first or second encryption scheme. For example, based on the number of bits received, the smart card may be able to determine the appropriate way to decrypt the first encrypted ECM. The smart card can

<img file="MX337441B_D0130.tif" />

continue processing the first encrypted ECM until it has been successfully decrypted. The amount of time that the smart card requires to successfully decrypt the first encrypted ECM can be based on the encryption scheme used for encryption of the first ECM.

In step 830, a second encrypted ECM using a second encryption scheme can be received by the converter-decoder box. This second encrypted ECM 10 may be associated with one or more different television channels than one or more television channels associated with the first encrypted ECM. The first encrypted ECM and the second encrypted ECM can be received as part of the same transponder stream. The first encrypted ECM 15 and the second encrypted ECM may correspond to different television channels transmitted and received by the same transponder stream.

The second encrypted ECM may contain a decrypted PID. Based on this PID, the decoder converter box 20 can determine if the second encrypted ECM is associated with a presented and / or stored television channel. If the television channel is not presented or stored, the second encrypted ECM can be ignored. However, if the second encrypted ECM is associated with the television channel 25 that is produced for presentation (for

<img file="MX337441B_D0131.tif" />

eg, via a television) and / or stored by the converter-decoder box, the second encrypted ECM can be routed within the converter-decoder box for decryption. The second encrypted ECM can be routed to the smart card inside the converter-decoder box for decryption. For the example of method 800, it is assumed that, like the first encrypted ECM, the second encrypted ECM is associated with one or more television channels that are produced for presentation and / or recording by the converter-decoder box. The second encrypted ECM can be received as part of the transponder stream containing multiple television channels that are grouped together into a single transponder stream by the television service provider, which includes the first television channel.

At step 840, the second encrypted ECM can be decrypted by the converter-decoder box. Decryption can be done by the smart card in the converter-decoder box. As such, the second, encrypted ECM can be routed within the converter-decoder box to the smart card for decryption. When the second encrypted ECM is received by the smart card, the second encrypted ECM can be processed by the smart card until it is decrypted. Once it is successfully decrypted, two control words can be obtained from use when decrypting a smart second may be able to decrypt it regardless of whether the first or second scheme

<img file="MX337441B_D0132.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0133.tif" />

second encrypted ECM for your television channel. The card determine the appropriate second mode

Encrypted ECM

ECM is encrypted using encryption. The smart card can process the second encrypted ECM until it is successfully decrypted. The amount of time that the smart card requires to successfully decrypt the second encrypted ECM can be based on the encryption scheme used for encryption of the second ECM.

For example, if the second encryption scheme is a light encryption scheme while the first encryption scheme is a heavy encryption scheme, the second encrypted ECM may take less time for the smart card to decrypt the first encrypted ECM.

In step 850, the audio and video packets corresponding to the first television channel and the second television channel can be received. Based on a locally stored network information table that identifies the

Associated ECM PID and encryption control bits of audio and video packets, the first decrypted appropriate control words of the first

Encrypted ECM and the second encrypted ECM can be determined for use by decrypting the

<img file="MX337441B_D0134.tif" />

<img file="MX337441B_D0135.tif" />

Ι ...- ΡΙ

ÍNStn UTO MSXKJwo 0E LA PíHH '/ EDaD industrial

<img file="MX337441B_D0136.tif" />

«11» »« l, ..₄,_{i € A}._Jv audio and video data packets. In order for a first television channel and a second television channel to be properly produced for display and / or recording by the converter-decoder box, it may be necessary for the appropriate control words to be decrypted from the ECMs for use in decryption . As such, when the television channel is presented or recorded, the smart card may be required to successfully decrypt the associated ECM to obtain the necessary control word for decryption prior to STB processing of encrypted audio and / or video packets using this control word. It is necessary to ensure that the smart card decrypts all the necessary ECMs prior to the control words contained in the ECMs, the encryption schemes used for the encryption of the ECMs can be synchronized by the television service provider such that the smart card will take time enough to decrypt each necessary ECM. This can occur in a transponder stream using the transponder stream, which means that it can be ensured that a smart card can decrypt the ECMs for all television channels on a particular transponder stream in a timely manner.

At step 860, the control words of the first ECM and the second ECM can be used to decrypt the

<img file="MX337441B_D0137.tif" />

<img file="MX337441B_D0138.tif" />

<img file="MX337441B_D0139.tif" />

first television channel and the second television channel concurrently. As such, television programs broadcast simultaneously on two television channels can both be produced for presentation and / or recording by the converter-decoder box. Once the control words have been obtained from the first ECM and the second ECM, regardless of the encryption scheme used for each ECM, decryption can be performed using the control words obtained in the same way. At the stage

870, the first decrypted television channel and the second decrypted television channel may be produced for display and / or storage by the decoder converter box. Following step 870, after a period of time, such as 10 seconds, it may be necessary to decrypt new ECMs to obtain new control words for decryption of the television channels. As such, method 800 can repeat the encryption scheme for each ECM that can change.

It should be understood that while method 800 is directed towards two television channels and encryption schemes, other modalities of method 800 may involve more than two encryption schemes and / or more than two television channels. Additionally, a single ECM, based on its PIDs, can be associated with more than one television channel. For example, referring to FIGURE 6, multiple channels can be associated

<img file="MX337441B_D0140.tif" />

with a common ECM. In some embodiments, associated ECMs with different television channels can be encrypted using the same encryption scheme. For example, referring to FIGURE 5, at any given time, one television channel may be associated with an encrypted ECM using a first encryption scheme while three other television channels on the same transponder stream may be associated with encrypted ECMs using a second encryption scheme.

FIGURE 9 illustrates one embodiment of a computer system. A computer system as illustrated in FIGURE 9 can be incorporated as part of the previously described computer devices, such as the television service provider system and the converter-decoder boxes. The decoder converter boxes can be combined with other systems, so that they are subsystems of a television. FIGURE 9 provides a schematic illustration of one embodiment of a computer system 900 that can perform the methods provided by various other embodiments, as described herein. It should be noted that FIGURE 9 is intended to provide only a generalized illustration of various components, any or all of which can be used as appropriate. FIGURE 9, therefore, amply illustrates how individual system elements «NSTITUTOMEXÍCANO

Say THE PSOFf £ DAr&gt; INDUSTRIAL can be implemented in a relatively separate or relatively more integrated way.

Computer system 900 is shown comprising hardware elements that can be electrically coupled via bus 905 (or otherwise can be in communication, as appropriate). The hardware elements may include one or more 910 processors, including without limitation one or more general-purpose processors and / or one or more special-purpose processors (such as digital signal processing chips, graphics acceleration processors, and / or the like); one or more input devices 915, which may include without limitation a mouse, keyboard, and / or the like; and one or more output devices 920, which may include without limitation a display device, a printer, and / or the like.

Computer system 900 may further include (and / or be in communication with) one or more non-transient storage devices 925, which may comprise, without limitation, local and / or network accessible storage, and / or may include , without limitation, a disk drive, a floppy drive, an optical storage device, a solid state storage device, such as a random access memory (RAM), and / or a read-only memory (ROM), which can

<img file="MX337441B_D0141.tif" />

IMPI '““ sssas • NDUSTRiAL

<img file="MX337441B_D0142.tif" />

programmable, flash upgradeable and / or the like. Such storage devices can be configured to implement any appropriate data storage, including without limitation, various file systems, database structures, and / or the like.

Computer system 900 may also include a communication subsystem 930, which may include without limitation a modem, a network card (wireless or wired), an infrared communication device, a wireless communication device, and / or equipment. chip (such as a Bluetooth ™ device, an 802.11 device, a WiFi device, a WiMax device, cellular communication facilities, etc.), and / or the like. Communication subsystems 930 may allow data to be exchanged with a network (such as the network described below, to name an example), other computer systems, and / or any other devices described herein. In many embodiments, the computer system 900 may further comprise a working memory 935, which may include a RAM or ROM device, as described above.

Computer system 900 may also comprise software elements, shown as currently being located within working memory 935, which includes an operating system 940, computer drivers,

IMPI

MEXICAN INSTITUTE

OF THE T'ltOHIEDAD INOU5T KIAL

<img file="MX337441B_D0143.tif" />

device, executable libraries, and / or other code; TaT as one or more application programs 945, which may comprise computer programs provided by various modalities, and / or may be designated to implement methods, and / or configure systems, provided by other modalities, as described herein. Simply by way of example, one or more procedures described with respect to the methods discussed above may be implemented as code and / or instructions executable by a computer (and / or a processor within a computer); In one aspect, then, such code and / or instructions may be used to configure and / or adapt a general-purpose computer (or other device) to perform one or more operations in accordance with the methods described.

A set of these instructions and / or codes may be stored on a non-transient computer readable storage medium, such as the non-transient storage devices 925 described above. In some cases, the storage medium can be incorporated into a computer system, such as the system

900 computer. In other embodiments, the storage medium may be separate from a computer system (eg, a removable medium, such as a compact disc), and / or provided in a package of

<img file="MX337441B_D0144.tif" />

INSTITUTO MEXICANO DE LA PROPIEDAD INDUSTRIAL installation, so that the storage medium can be used to program, configure, and / or adapt a general-purpose computer with the instructions / code stored in it. These instructions could take the form of executable code, which is executed by the system.

900 and / or could take the form of source and / or installable code, which, after collection and / or installation on the system

900 (for example, using any of a variety of generally available collectors, installation programs, compression / decompression utilities, etc.), then they take the form of executable code.

It will be apparent to those of skill in the art that substantial variations can be made according to specific requirements. For example, custom hardware can also be used, and / or particular elements could be implemented as in hardware, software (including portable software, such as applets, etc.), or both. In addition, connection to other computer devices such as input / output network devices can be used.

As mentioned above, in one aspect, some embodiments may employ a computer system (such as the computer system 900) to perform the methods in accordance with various embodiments of the invention.

<img file="MX337441B_D0145.tif" />

According to a set of modalities, part or all of the procedures of such methods are performed by the computer system 900 in response to the processor 910 which executes one or more sequences of one or more instructions (which may be incorporated into the operating system 940 and / or other code (such as an application program 945) contained in working memory 935. Such instructions may be read in working memory 935 from another computer readable medium, such as one or more of the non-transient storage devices 925. Merely by way of example, executing the sequences of instructions contained in working memory 935 could cause processors 910 to perform one or more procedures of the methods described herein.

The terms machine readable medium and computer readable medium, as used herein, refer to any medium that participates in providing data that causes a machine to operate in a specific mode. In an embodiment implemented using computer system 900, various computer readable means could be involved to provide instructions / code to processors 910 for execution and / or could be used to store and / or carry such instructions / code. In many implementations, a computer readable medium is a physical storage medium

<img file="MX337441B_D0146.tif" />

and / or tangible. Such a medium can take the form of a non-volatile medium or a volatile medium. The nonvolatile medium includes, for example, optical and / or magnetic disks, such as non-transient storage devices 925. Volatile media includes, without limitation, dynamic memory, such as working memory 935.

Common forms of physical and / or tangible computer-readable media include, for example, a floppy disk, floppy disk, hard drive, magnetic tape, or any other magnetic media, a CD-ROM, any other optical media, insert cards , paper tape, any other physical media with hole patterns, a RAM, a PROM, EPROM, a FLASH-EPROM, any other memory chip or cartridge, or any other means by which a computer can read instructions and / or code.

Various forms of computer readable media can be involved in bringing one or more sequences of one or more instructions to the 910 processors for execution. Simply by way of example, the instructions may initially be carried on a magnetic and / or optical disc of a remote computer. A remote computer could load the instructions into dynamic memory and send the instructions as signals over a transmission medium to be received and / or executed by the computer system 900.

The 930 communication subsystem (and / or components&gt;

<img file="MX337441B_D0147.tif" />

MEXICAN INSTITUTE OF INDUSTRIAL PROPERTY

<img file="MX337441B_D0148.tif" />

thereof) will generally receive signals, and bus 905 could then carry the signals (and / or the data, instructions, etc. carried by the signals) to the working memory 935, from which the 910 processors retrieve and execute the instructions . The instructions received by the working memory 935 can optionally be stored in a non-transient storage device 925 either before or after execution by the processors 910.

It will also be understood that the components of the system

900 computers can be distributed over a network. For example, the same processing can be performed at one location using a first processor while other processing can be performed by another remote processor on the first processor. Other components of the computer 900 system may be similarly distributed.

The methods, systems, and devices discussed in the above are examples. Various configurations can omit, replace, or add various procedures or components as appropriate. For example, in alternative configurations, the methods may be performed in a different order than described, and / or various steps may be added, omitted, and / or combined

Also, features described with respect to certain configurations can be combined into various other configurations.

Different aspects and elements of

<img file="MX337441B_D0149.tif" />

MEXICAN INSTITUTE OF PROPERTY

INDUSTRIAL Άα in a similar way.

thus, many configurations can be combined. Also, technology evolves and, the elements are examples and do not limit the scope of the description or claims.

Specific details are given in the description to provide a complete understanding of exemplary configurations (including implementations). However, configurations can be practiced without these specific details. For example, well-known circuits, processes, algorithms, structures, and techniques have been shown without unnecessary detail to avoid obscuring the configurations. This description provides exemplary configurations only, and does not limit the scope, applicability, or configurations of the claims. Rather, the foregoing description of the configurations will provide those skilled in the art with a description that enables the implementation of the described techniques. Various changes can be made in the function and arrangement of elements without departing from the spirit or scope of the description.

Also, configurations can be described as a process which is represented as a flowchart or block diagram. Although each can describe operations as a sequential process, many of the operations can be performed in parallel or concurrently. In addition, the order of operations can be rearranged. A

<img file="MX337441B_D0150.tif" />

Mexican Institute of Industrial Property

<img file="MX337441B_D0151.tif" />

process may have additional stages not included in the figure. Furthermore, the examples of the methods may be implemented by hardware, software, firmware, middleware, microcode, hardware description languages, or any combination of these. When implemented in software, firmware, middleware, or microcode, the program code or code segments to perform the necessary tasks can be stored on a non-transient computer-readable medium such as a storage medium. Processors can perform the described tasks.

Having described various exemplary configurations, various modifications, alternative constructions, and equivalents can be used without departing from the spirit of the disclosure. For example, the above elements may be components of a larger system, where other rules may take precedence over or otherwise modify the application of the invention. Also, a number of stages can be understood before, during, or after the above elements are considered. Accordingly, the foregoing description does not limit the scope of the claims.

<img file="MX337441B_D0152.tif" />