Method and system for secure content distribution by a broadband gateway

摘要

A broadband gateway, which enables communication with a plurality of devices, handles at least one physical layer connection to at least one corresponding network access service provider. Security boundaries such as conditional access (CA) and/or digital right management (DRM) boundaries associated with the broadband gateway are identified based on security profiles associated with the plurality of devices and/or a service from networks. The identified security boundaries are utilized to determine or negotiate CA information for content access for the service. The received content may be distributed according to the determined CA information and the security profiles of the corresponding devices. The broadband gateway may be automatically and dynamically configured based on the identified security boundaries to secure content distribution to the devices. Content distribution security schemes, for example, super encryption, simul-crypt, IPSec and/or watermarking, may be selected by matching the CA information with corresponding device security profiles.

主权项

1. A method for networking, the method comprising:
in a broadband gateway that enables communication with a plurality of devices, wherein said broadband gateway is operable to handle at least one physical layer connection to at least one network access service provider:
determining a security boundary for at least one of said plurality of devices based in part on a security profile associated with said at least one of said plurality of devices;negotiating, with said at least one network access service provider, conditional access information for a service provided by said at least one network access service provider based on said security boundary;receiving content for said service utilizing said conditional access information;determining a content distribution security scheme for distributing said content to said at least one of said plurality of devices by comparing said conditional access information with said security profile associated with said at least one of said plurality of devices; anddistributing said content to said at least one of said plurality of devices based on said content distribution security scheme.