Method and apparatus for supporting multiple broadcasters independently using a single conditional access system

摘要

A method and apparatus for brokering the enablement of the communication of encrypted media programs from a plurality of independent broadcasters to a plurality of receivers is disclosed. The system makes use of a pairing key for each provided service, which is differently encrypted by a pairing server and by the broadcaster providing the service. The encrypted versions of the pairing key are decrypted in a first receiver module using information known to the pairing service but not the broadcaster and in a second receiver module using information known to the broadcaster. The pairing key is used to cryptographically bind the first and second receiver modules.

主权项

1. A method of brokering an enabling of communication of at least one encrypted media program from a plurality of independent broadcasters to a plurality of receivers, the at least one encrypted media program decryptable by a first receiver module securely communicating with a second receiver module according to a pairing key associated with one of the plurality of receivers, comprising the steps of:
transmitting a first broadcast service enabling request for a first broadcast service from one of the plurality of broadcasters to a broker independent from the one of the plurality of broadcasters, the first broadcast service enabling request comprising an identification of the one of the plurality of receivers; receiving a first encrypted version of the pairing key ES1[Kp] in the one of the plurality of broadcasters from the broker, the first encrypted version of the pairing key ES1[Kp] decryptable by first information S1 securely stored in the first receiver module of the one of the plurality of receivers; generating a second encrypted version of the pairing key ES2[Kp] in the one of the plurality of broadcasters, the second encrypted version of the pairing key ES2[Kp] decryptable by second information S2 securely stored in the second receiver module; and transmitting the first encrypted version of the pairing key ES1[Kp] and the second encrypted version of the pairing key ES2[Kp] to the one of the plurality of receivers; transmitting a second broadcast service enabling request for a second broadcast service from the one of the plurality of broadcasters to the broker, the second service enabling request comprising the identification of the one of the plurality of receivers; receiving a first encrypted version of a second pairing key ES1[Kp2] from the broker, the first encrypted version of the second pairing key ES1[Kp2] decryptable by the first information S1 securely stored in the first receiver module of the one of the plurality of receivers; generating a second encrypted version of the second pairing key ES2[Kp2], the second encrypted version of the pairing key ES2[Kp2] decryptable by the second information S2 securely stored in the second receiver module; and transmitting the first encrypted version of the second pairing key ES1[Kp2] and the second encrypted version of the second pairing key ES2[Kp2] to the one of the plurality of receivers; wherein the second broadcast service is different than the first broadcast service.