Abstract:
A method for subscribing a service and distributing encryption key based on public-key encryption algorithm in a digital CATV system are disclosed. In accordance with an aspect of the present invention, there is provided a method including the steps of: a) generating a charged service application message; b) generating a session connection request message, signing based on a digital signature scheme with appendix on the session connection request message and transmitting to the head-end; c) generating a symmetric-based session key, signing a digital signature on the key, encrypting based on a public-key of the subscriber, transmitting the session key to the subscriber; decrypting the session key message, verifying the digital signature, extracting the session key from the session key message and storing at a Condition Access Module; and d) signing a digital signature on the charged service request message, encrypting using the extracted session key and transmitting to the head-end.

Description:
FIELD OF THE INVENTION 
   The present invention relates to a method for subscribing a service and distributing an encryption key based on public-key encryption algorithm in a digital CATV system; and in particular, to a method for requesting to a charged service safely through subscribing a digital CATV service through a cable return channel and for enhancing the safety of the encryption system by distributing an Authorization key (AK) and a Channel Key (CK) based on a symmetric session key set by a head-end and a subscriber based on a public-key protocol. 
   DESCRIPTION OF RELATED ART 
   In a digital CATV system, a Conditional Access System (CAS) is used to provide a charged service. The CAS encrypts the charged service based on an encryption algorithm and provides the charged service to only subscribers requesting the charged service. 
   The CAS uses a hierarchical key system for efficient conditional access. The CAS encrypts an audio and video data by scrambling the audio and video data based on a Control Word (CW) and encrypts the CW based on a Channel Key (CK) outranking the CW. 
   Though the CAS has some differences from another CAS, in general, the CK is encrypted using an Authorization Key (AK). 
   Because various kinds of keys are used in the CAS, the method for efficiently managing the keys is strongly required. 
   “DigiPass” is based on a symmetric encryption technique, which is one of the conventional CAS for the digital broadcasting developed by the same assignee with this application, Electronics and Telecommunications Research Institute (ETRI). In order to generate keys using an entity authentication, a symmetric key is generated based on a method consented by a broadcasting station and a subscriber. Herein, the consented method is described as below. The broadcasting station and the subscriber share a key generation matrix and a key generator. The broadcasting station transmits indexes of a generation key and an expansion key to the subscriber and the subscriber generates a key based on the indexes, wherein the key is identical to the key of the broadcasting station. 
   Assuming the key generation table is stored safely, because only the authenticated subscriber can generate the identical key with that of the broadcasting station, indirectly, the broadcasting station authenticates the entity of the subscriber and distributes the encryption key at the same time. The conventional CASs have a drawback that they can&#39;t guarantee the safety. Because the “DigiPass” has to manage not only the keys but the key generating matrix, “DigiPass” has limitation to the safety of the system. 
   Also, because “DigiPass” have to generate an encryption key in the subscriber&#39;s Conditional Access Module (CAM), there is a drawback as the computation load to the receiver. 
   SUMMARY OF THE INVENTION 
   It is, therefore, an object of the present invention to provide a method for subscribing a digital CATV service through a cable return channel so that the subscriber can safely request a charged service; a head-end and a subscriber generate a symmetric-based session key and distribute a Authorization Key (AK) and a Channel Key (CK) using the session key in order to increase a safety of an encryption system. 
   In accordance with an aspect of the present invention, there is provided method for subscribing a service through a return channel using a receiver of a subscriber, the method including the steps of: a) generating a charged service application message will be transmitted to a head-end by the receiver of the subscriber through a cable return channel; b) generating a session connection request message, signing based on a digital signature scheme with appendix on the session connection request message and transmitting to the head-end by the subscriber; c) at the head-end, generating a symmetric-based session key, signing a digital signature on the session key based on digital signature scheme with appendix, encrypting using a public-key of the subscriber, transmitting the session key to the subscriber; at the subscriber&#39;s receiver, decrypting the session key message, verifying the digital signature, extracting the session key from the session key message and storing at an inner memory of a Condition Access Module (CAM); and d) at the subscriber&#39;s receiver, signing a digital signature on the charged service request message, based on the digital signature scheme with appendix, encrypting using the extracted session key and transmitting to the head-end. 
   In accordance with another aspect of the present invention, there is provided a method for distributing a encryption key of a digital CATV system based on a public-key encryption algorithm, the method including the steps of: a) at the head-end, transmitting a session key to the receiver of the subscriber who requests the charged service in response to the request for the charged service of the digital CATV service by the subscriber; b) at the head-end, encrypting the AK using the session key and transmitting the encrypted AK to the subscriber&#39;s receiver; and c) at the head-end, encrypting a Channel Key (CK) using the distributed Authorization Key (AK) and transmitting to the subscriber&#39;s receiver. 
   In accordance with another aspect of the present invention, there is provided a method for subscribing a charged service and distributing an encryption key based on a public-key encryption algorithm in accordance with an embodiment of the present invention, the method including the steps of: a) at the subscriber, determining whether an online subscription or an offline subscription for the charged service; b) if the subscriber requests the charged service in online, at the subscriber, determining whether a PSTN, internet or a cable return channel; c) if the subscriber determines the PSTN subscription, at the subscriber, calling the registration authority (RA) and requesting for the charged service; d) if the subscriber determines the internet subscription, at the subscriber, connecting to the RA site, setting up the internet security connection as Secure Socket Layer (SSL) and requesting the charged service; and e) if the subscriber determines the cable return channel, at the subscriber, selecting the charged service using the digital program guide and the remote controller and generating a charged service request message include the selected charged service information. 

   
     BRIEF DESCRIPTION OF THE DRAWINGS 
     The above and other objects and features of the present invention will become apparent from the following description of the preferred embodiments given in conjunction with the accompanying drawings, in which: 
       FIG. 1  is a block diagram showing a digital CATV system for subscribing a CATV service and requesting a charged service of the CATV service in accordance with an embodiment of the present invention; 
       FIG. 2  is a block diagram illustrating an encryption and decryption method in the digital CATV system in accordance with the embodiment of the present invention; 
       FIG. 3  is a flowchart describing a method for subscribing the digital CATV service in accordance with the embodiment of the present invention; 
       FIG. 4  is a flowchart showing a method for subscribing a digital CATV service and distributing encryption keys based on a public-key encryption algorithm in accordance with the embodiment of the present invention; 
       FIG. 5  is a diagram showing a structure of a Authorization Key (AK) in accordance with the embodiment of the present invention; and 
       FIG. 6  is a diagram showing a structure of a Channel key (CK) in accordance with the embodiment of the present invention. 
   

   DETAILED DESCRIPTION OF THE INVENTION 
   Other objects and aspects of the invention will become apparent from the following description of the embodiments with reference to the accompanying drawings, which is set forth hereinafter. 
     FIG. 1  is a block diagram showing a digital CATV system for subscribing a CATV service and requesting a charged service of the CATV service in accordance with an embodiment of the present invention. 
   A head-end  10  includes a Conditional Access System (CAS)  11 , a Certificate Authority (CA)  12  and a registration authority  13 . 
   The CAS  11  generates various encryption keys, Authorization Key (AK) messages and Channel key (CK) messages, and transmits them to a subscriber. 
   The CA  12  manages certificates. The registration authority  13  manages subscribers include a service subscription. 
   The head-end  10  transmits audio and video data to the subscriber through an in-band channel of a cable network  14 . The subscriber  18  can request for a charged service using a return channel in an out-of-band in the cable network  14 . 
   The subscriber  18  subscribes to the CATV service and requests the charged service through a public switched telephone network (PSTN)  15  or Internet  16 . 
   The local registration authority  17  located out of the head-end  10  receives subscriptions for the CATV service and the charged service. 
     FIG. 2  is a block diagram illustrating an encryption and decryption method in the digital CATV system in accordance with the embodiment of the present invention. 
   First of all, the CAS  11 , which is a transmitting part, using a scrambler  21 , scrambles audio and video data based on a Control Word (CW) and transmits the scrambled resource to a receiving part. Herein, the CW is encrypted based on the CK and transmitted to the receiving part through an Entitlement Control Message (ECM). 
   Finally, the CK is encrypted based on the AK and transmitted to the receiving part. 
   In the other hand, a receiver  18  having the Conditional Access Module (CAM) of the subscriber decrypts an Entitlement Management Message (EMM) using a decryption unit  26  and the AK and extracts the CK. 
   Thereafter, the receiver  18  decrypts the encrypted ECM and extracts the CW. 
   Finally, the receiver  18  restores the audio and video data by descrambling the scrambled resources using the CW and a descrambler  24 . 
     FIG. 3  is a flowchart describing a method for subscribing the digital CATV service in accordance with the embodiment of the present invention. 
   At step S 301 , a user who wants to subscribe to the CATV service selects one of an online subscription and an offline subscription. 
   After, at step S 302 , if the user selects the offline subscription, the user visits a central registration authority located in the head-end  10  or a local registration authority located out of the head-end and, at step S 303 , subscribes to the service. 
   At step S 304 , the subscriber checks whether a Conditional Access Module (CAM) terminal exists or not in the local/central registration authority. At step S 305 , if there is the CAM terminal, the CAM terminal initializes the CAM. The initialization of the CAM includes processes of a) storing a certificate of an authorization, b) storing the certificate of the head-end and generating and storing a public-key and a personal-key of the subscriber ( 3 ). 
   Finally, at step S 306 , a subscription process is completed with issuing the initialized CAM to he subscriber. 
   At step S 313 , if there is no CAM in the step S 304 , the local registration authority transmits subscriber&#39;s registration information, and initializes the CAM in the central registration authority recited in the step S 305 , and sends the initialized CAM and an activation number to the subscriber using a registered mail. 
   At step S 309 , if the applicant selects the online subscription in the step S 301 , the user can subscribe to the CATV service using the telephone at the step S 307  or the internet. 
   At the step S 307 , when subscribing using the telephone, the user calls the registration authority. 
   At step S 310 , when subscribing using the internet, the user connects to the head-end registration authority site, at step S 311 , the user sets up internet security connection and, at step S 312 , subscribes to the CATV service. 
   At step S 313 , the head-end registration authority initializes the CAM and sends the initialized CAM by the registered mail. 
   After receiving an activation number by the registered mail, the user goes through the following steps. 
   (1) the subscriber calls the head-end registration authority and reports receiving the CAM by telling the activation number. 
   (2) if confirming the subscriber got the CAM at step (1), head-end registration authority prepares for the subscription. 
     FIG. 4  is a flowchart showing a method for subscribing a charged service and distributing an encryption key based on a public-key encryption algorithm in accordance with an embodiment of the present invention. 
   At step S 401 , the subscriber selects one of an online subscription and an offline subscription for the charged service. 
   Thereafter, if the subscriber selects the offline, at step S 402 , the subscriber visits a near registration authority and, at step S 403 , subscribes to the charged service. 
   At step  404 , the subscriber checks whether the CAM terminal exists or not in the registration center. At step S 405 , if there is the CAM terminal, the subscriber stores the AK and the CK required for the request in the CAM. At step S 412 , if there is not the CAM, the subscriber prepares for connecting a session. 
   The process for connecting sessions is described as following steps. 
   (1) the head-end monitors that the CAM module of the subscriber requesting the charged service is inserted. Wherein, the head-end checks a transmission of an insertion alarm message when the CAM is inserted into a subscriber&#39;s receiver. 
   (2) if the head-end  10  receives the insertion alarm message, that is, the CAM module corresponding to the subscriber requesting the charged service through the registration authority is inserted into the subscriber&#39;s receiver. 
   (3) the head-end  10  encrypts a digital signature, i.e., a session key message using the public-key of the subscriber and transmits to the subscriber. 
   (4) the subscriber verifies the digital signature after decrypting the session key transmitted from the head-end  10  using the personal-key. If the subscriber verifies successfully, the subscriber stores the session key at an internal memory of the CAM. 
   At step S 413 , after sharing the session key, referred to the step S 412 , a request process is completed with issuing the initialized CAM to the subscriber, the head-end distributes the AK which is illustrated in the  FIG. 5 . The AK includes N AK Vectors  51  (N is an integer) encrypted using the session key achieved according to the step S 412  and is transmitted to the subscriber. Wherein, the N is a number of the charged services requested by the subscriber. The AK vector includes a symmetric key, i.e., AK  52  and package information  53  of the charged service related to the AK. 
   At step S 414 , after distributing the AK at the step S 412 , the CK is distributed. Wherein, the head-end generates the CK message, encrypts the CK message using the AK and distributes to the subscriber. 
   The CK includes L Pkg Vectors  61 . L is a total number of the charged services provided by the head-end. The Pkg vector  61  includes M channel (CH) vectors  62 . M is a total number of channels used for each charged service. Each CH vector includes a symmetric encryption key, i.e., CK  63  and channel information  64  related to the CK  63 . 
   At step S 405 , after channel key distribution, the subscriber decrypts the CW using the distributed CK and watching TV programs by descrambling the scrambled audio and video data. Herein, the process for decrypting the CW using the AK and the CK is described in  FIG. 2 . 
   At the result of the step S 401 , if the subscriber requests the charged service in online, there are three types of the subscription, the telephone  406 , the internet  408  and the cable return channel. 
   First, at step S 407 , in the case of using telephone, referred to the step S 401  and S 406 , the subscriber calls the registration authority, at step S 411 , the subscriber requests for the charged service. As recited in the step S 404 , next steps are identical with the steps used when the CAM terminal doesn&#39;t exist, from the step S 412  to S 415 . Accordingly, the description on the operations after the step S 411  will be skipped. 
   Second, at the step S 409 , in the case of using the internet, referred to the step S 401 , S 406  and S 408 , the transceiver of the subscriber connects to the registration authority site, at step S 410 , sets up the internet security connection as Secure Socket Layer (SSL) and, at step S 411 , requests the charged service. As recited in the step S 404 , next steps are identical with the steps used when the CAM terminal doesn&#39;t exist, i.e., the step S 412  or S 415 . 
   Third, in the case of using the cable return channel, referred to the step S 401 , S 406 , S 408  and S 416 , a digital program guide and a remote controller are used for requesting the charged service through the cable return channel. The detail procedure is described as following steps. 
   (1) the subscriber selects the charged service using the digital program guide and the remote controller; and 
   (2) the subscriber generates a charged service request message having the selected charged service information. 
   Thereafter, the subscriber generates a session key using the session connection, referred to the step S 412 , and transmits the charged service request message generated using the session key to the head-end. The detail procedure is described as following steps. 
   (1) the subscriber generates a session connection request message, signs a digital signature on the request message and transmits the signed message to the head-end  10 ; 
   (2) if the head-end  10  successfully verifies the digital signature of the transmitted message from the subscriber, referred to the step (1), the head-end  10  generates a symmetric-based session key and make a digital signature using a message-added digital signature technique; 
   (3) the head-end  10  encrypts a session key message using the public-key of the subscriber and transmits the encrypted message to the subscriber. 
   (4) the subscriber decrypts the session key message and verifies the digital signature; 
   (5) if the subscriber successfully verifies the digital signature, the subscriber extracts the session key from a session key message and stores the session key at a memory; 
   (6) the subscriber makes a digital signature on the charged service request message, encrypts the charged service request message using the session key and transmits the encrypted charged service request message to the head-end  10 ; 
   (7) the head-end  10  decrypts the encrypted charged service request message using the session key and verifies the digital signature; and 
   (8) if the head-end  10  successfully verifies the digital signature, the head-end  10  accepts the charged service requested by the subscriber and goes to next step. 
   Meanwhile, after the session connection, as recited in the step S 404 , next steps are identical with the steps used when the CAM terminal doesn&#39;t exist, i.e., the step S 412  or S 415 . 
     FIG. 5  is a diagram showing a structure of the Authorization Key (AK) in accordance with the embodiment of the present invention. 
   The AK message includes N AK Vectors  51 . Each of the AK vectors includes the AK  52 , which is a symmetric-based key, and package information  53  of the charged service related to the AK. N is the number of the charged services requested by the subscriber. 
     FIG. 6  is a diagram showing a structure of a Channel key (CK) message in accordance with the embodiment of the present invention. 
   The CK includes L Pkg Vectors  61 . L is a total number of the charged services provided by the head-end. 
   Each of the Pkg vectors  61  includes M CH vectors  62 . M is a total number of channels used for each charged service. 
   Each CH vector includes the symmetric-based encryption key, i.e., CK  63  and the channel additional information  64  related to the CK  63 . 
   The method in accordance with the present invention can be embodied as a program and stored in recording media readable by a computer, e.g., CD-ROM, RAM, floppy disk, hard disk, magneto-optical disk, etc. 
   The method of the present invention provides the online/offline subscription service safely, in particular, for the subscription of the charged service through a cable return channel, provides the integrity and non-repudiation of the message based on the digital signature scheme. 
   The method provides a Conditional Access System (CAS) only depended on the confidentiality of a key, generates a session key based on an encryption protocol and distributes an Authentication Key (AK) and the Channel Key (CK) based on the session key. 
   The method decreases the load of a computing power for generating an encryption key in a subscriber&#39;s CAM as “DigiPass”. 
   The method provides a digital TV CAS based on PKI. Because the CAS works with a Certificate Authority (CA) and a Registration Authority (RA) in the head-end, the method provides an encryption system as effective as the encryption system based on the PKI. 
   The present application contains subject matter related to Korean patent application no. 2003-79003, filed in the Korean intellectual Property Office on Nov. 10, 2003, the entire contents of which being incorporated herein by reference. 
   While the present invention has been described with respect to certain preferred embodiments, it will be apparent to those skilled in the art that various changes and modifications may be made without departing from the scope of the invention as defined in the following claims.