Abstract:
Embodiments of the present invention provide for the copy protection of distributed material after conditional access is applied, regardless of where the material is distributed. The solutions described provide the advantage of being sufficiently simple in implementation to qualify as “curb high” solutions. “Curb high” solutions provide a range of security from minimal security to a high level of security while requiring relatively fewer system resources to implement than prior approaches.

Description:
RELATED APPLICATION  
       [0001]    This application claims the benefit of U.S. Provisional Application No. 60/070,764, filed Jan. 8, 1998. 
     
    
     
       FIELD OF THE INVENTION  
         [0002]    The present invention relates to copy protection of consumer electronics media, and more particularly to methods and arrangements for providing copy protection for audio-visual signals used in consumer electronics.  
         DESCRIPTION OF THE RELATED ART  
         [0003]    The proliferation of digital technology in consumer electronics has provided a plethora of digital consumer technology products that provide superior performance relative to their analog predecessors. However, the distribution of audio-visual information in digital format coupled with the availability of digital recording devices raises concerns about the piracy of digital audio-visual products, particularly in the entertainment industry. In response to this concern, the MPAA (Motion Picture Association of America) has proposed copy protecting motion pictures released on Digital Video Disk (DVD) to prevent a purchaser from purchasing a single copy and making and distributing multiple copies.  
           [0004]    However, these concerns are not limited to audio-visual information released on DVD. Similar concerns exist for other media, for example, cable television and broadcast television among others.  
           [0005]    Cable television distributors are concerned about protecting their transmissions, One approach has been to use conditional access to control the distribution of their transmission. Conditional access refers to controlling the distribution of information at user locations. An important difference between using conditional access and copy protection to control the distribution of material is that conditional access applies to particular distribution sites or nodes, while copy protection continues beyond the distribution sites or nodes.  
           [0006]    Another approach for protecting audio-visual information has been to encrypt an audio-visual signal and add the capability for receivers to decrypt the audio-visual signal. One problem with this approach is that the receivers often require complex functionality to perform the decrypting, for example in the case of public/private key encryption/decryption.  
           [0007]    Another proposal for copy protection of media has been provided by the Copy Protection Working Group (CPTWG) data transmission discussion group (DTDG) sub-committee for copy protection of Section 1394 technology. Section 1394 technology refers to a 100 Mbit/sec or 400 Mbit/sec bus protocol commonly applicable to consumer electronics.  
           [0008]    Another proposal is being developed by the National Renewable Security Standards Committee (NRSSC) # an interim standard of EIA (Electronics Industry Associates) security (IS679) that defines two interfaces for removable condition access security. These include what are referred to as a “smart card” and a PCMCIA card.  
           [0009]    [0009]FIG. 1 illustrates a conventional arrangement  100  for copy protecting an audio-visual signal using a replaceable security module that is coupled to a receiver via an IS679 interface. One or more audio-visual signals, identified as AVS 1 , through AVS N , are provided to a transmitter  102 , typically at rates in the range of 6 Mbits/sec to 100 Mbits/sec. Audio-visual signals AVS 1 , AVS 2  through AVS N , are encoded by encoders E 1 , E 2  through E N  respectively, using for example, MPEG encoding techniques, and separated into audio signals AS 1 , through AS N  and video signals VS 1 , VS 2  through VS N .  
           [0010]    Audio signals AS 1 , AS 2  through AS N  and video signals VS 1 , VS 2  through VS N  are then encrypted by scramblers S 1 , S 2 , through S N  respectively, using for example, any number of widely available key encryption techniques. The encrypted audio signals AS 1 , AS 2  through AS N  and video signals VS 1 , VS 2  through VS N  are then combined by a combiner  104  into a single audio-visual signals. Combiner  104  may include several processes such as multiplexers and other processors necessary to provide the single audio-visual signal.  
           [0011]    The single audio-visual signal is then provided to a receiver  106  via a link  108 . Link  108  can include one or more communication mediums and/or systems and supporting apparatuses that are configured to carry the single audio-visual signal between transmitter  102  and receiver  106 . Examples of link  108  include, but are not limited to, a telephone system, a cable television system, a broadcast television system (direct or indirect), a satellite broadcast system (direct or indirect), one or more computer networks and/or buses, the Internet, an intranet, and any software, hardware and other communication systems and equipment associated therewith for transmitting encoded data between two locations.  
           [0012]    After receiving the single audio-visual signal, receiver  106  transmits the audio-visual signal to a replaceable security module  110  via an interface  112 . For IS679 applications, replaceable security module  110  is a smart card or a PCMCIA card that is communicatively coupled to receiver  106  via an IS679 compatible interface  112 . However, other types of interfaces may also be used to couple replaceable security module  110  to receiver  106 . Replaceable security module  110  includes a de-scrambles  114  that removes the encryption placed into the encoded audio signals AS 1 , AS 2  through AS N  and video signals VS 1 , VS 2  through VS N  by scramblers S 1 , S 2  through S N . The de-scrambled single audio-visual signal is then returned to receiver  106  and decoded with a decoder  116  contained in receiver  106 . The de-scrambled and decoded audio-visual signal is then provided to a display  118  to be displayed or otherwise viewed.  
           [0013]    One of the advantages of using this approach is that all of the de-scrambling operations are performed in replaceable security module  110 . This allows manufacturers to provide standard receivers without specialized de-scrambling. For IS679 applications, the replaceable security modules may be in the form of a smart card or a PCMCIA card, providing “personalized” security.  
           [0014]    Despite the advantages of this approach, it is not without its own disadvantages and limitations. One disadvantage to this approach is that in situations where interface  112  is accessible, the de-scrambled audio-visual signals can be redistributed to other locations and then decoded and displayed, circumventing the copy protection. For example, in the case of a DVD player that uses a replaceable security module as illustrated in FIG. 1, if interface  112  can be accessed, then the de-scrambled (unprotected) audio-visual signal can be distributed to multiple receivers and display devices and even recorded and redistributed.  
           [0015]    Based upon the need to provide copy protection of audio-visual signals in IS679 application and the limitations in the prior approaches, an approach for providing copy protection of audio-visual signals IS679 applications that avoids the problems associated with the prior approaches is highly desireable.  
         SUMMARY OF THE INVENTION  
         [0016]    In general, embodiments of the present invention provide for the copy protection of distributed material after conditional access is applied, regardless of where the material is distributed. The solutions described herein provide the advantage of being sufficiently simple in implementation to qualify what is known in the art as “curb high” solutions. “Curb high” solutions provide a range of security from minimal security to a high level of security while requiring relatively fewer system resources to implement than prior approaches.  
           [0017]    The method of the preferred embodiment of the present invention for copy protecting a digital signal representing audio-visual information, comprises the steps of: (a) encoding the digital signal to obtain an encoded signal; (b) converting the encoded signal into a copy protected signal using a copy protection function, wherein the function utilizes a data signal representing copy protection data; and (c) scrambling the copy protected signal to obtain a scrambled signal.  
           [0018]    The system of the preferred embodiment of the present invention for recovering an audiovisual signal from a digital signal including a scrambled signal and a copy protection data signal representing copy protection data, comprises a receiver and a descrambler module interconnected via a link.  
           [0019]    The descrambler module includes:  
           [0020]    (1) a first communication interface for communicating with the receiver via the link; and  
           [0021]    (2) a descrambler for descrambling an incoming scrambled signal from the receiver via the link.  
           [0022]    The receiver includes:  
           [0023]    (1) a second communication interface for communicating with the descrambler module via the link,  
           [0024]    (2) a processor for: (i) removing said data signal from the digital signal, and storing the copy protection data represented by the data signal in a memory device, (ii) extracting said scrambled signal from the digital signal, and providing the scrambled signal to the descrambler via the link; and  
           [0025]    (3) a reconverter for converting an incoming copy protected signal from the descrambler back into said audiovisual signal using an inverse copy protection function, wherein the inverse function utilizes said stored copy protection data.  
           [0026]    In this preferred embodiment of the present invention, the signals flowing from the descrambler module to the receiver via the link are protected against copying. 
       
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0027]    The above and other features, organizations, advantages and objects of the present invention, which are believed to be novel, are set forth with particularity in the appended claims, The present invention, both as to its organization and manner of operation, together with further objects and advantages, will be fully understood from the following detailed description and the accompanying drawings. Each of the drawings contained herein are not considered to be accurate depictions of the embodiments of the invention, but are provided for illustrative purposes only and are to be interpreted in conjunction with the attached specification.  
         [0028]    [0028]FIG. 1 illustrates a conventional arrangement for copy protecting an audio-visual signal using a replaceable security module that is coupled to a receiver via an IS679 interface.  
         [0029]    [0029]FIG. 2 illustrates an arrangement for copy protecting audio-visual signals using a replaceable security module according to a preferred embodiment of the present invention.  
         [0030]    [0030]FIG. 3 is a block diagram of an arrangement that illustrates a second preferred embodiment of the present invention.  
         [0031]    [0031]FIG. 4 is a block diagram that illustrates a computer system upon which a preferred embodiment of the invention may be implemented. 
     
    
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS  
       [0032]    The following description is provided to enable any person skilled in the art to make and use the invention and sets forth the best modes presently contemplated by the inventors of carrying out the invention. Various modifications, however, will remain readily apparent to those skilled in the art, since the generic principles of the present invention have been defined herein.  
         [0033]    [0033]FIG. 2 illustrates an arrangement  200  for copy protecting audio-visual signals using a replaceable security module according to a preferred embodiment of the present invention. One or more audio-visual signals, identified as AVS 1 , AVS S  through AVS N  are provided to a transmitter  202 , typically at rates in the range of 6 Mbits/sec to 100 Mbits/sec. Audio-visual signals AVS 1 , AVS 2  through AVS N  are encoded by encoders E 1 , E 2  through E N  respectively contained in transmitter  202 , using, for example, MPEG encoding techniques, and separated into audio signals AS 1 , AS 2  through AS 1  and video signals VS 1 , VS 2  through VS N .  
         [0034]    A function is applied to audio signals AS 1 , AS 2  through AS N  and video signals VS 1 , VS 2  through VS N  by function modules, F 1 , F 2  through F N  respectively to add copy protection. Copy protection data CP DATA is provided to transmitter  202  and used by function modules F 1 , F 2  through F N  to apply the function to audio signal AS 1 , AS 2  through AS 1  and video signals VS 1 , VS 2  through VS N .  
         [0035]    After being processed by function modules F 1 , F 2  through F N , audio signals AS 1 , AS 2  through AS N  and video signals VS 1 , VS 2  through VS N  are encrypted by scramblers S 1 , S 2  through S N  respectively using for example, any number of widely available key encryption techniques and copy of protection data CP DATA. Encryption information required by scramblers S 1 , S 2  through S N , such as for example, encryption key information, is provided by a conditional access management system (not illustrated) that is typically included in transmitter  202 , but may reside elsewhere.  
         [0036]    The encrypted audio signals AS 1 , AS 2  through AS N , video signals VS 1 , VS 2  through VS N  and copy protection data CP DATA are then combined by a combiner  204  to provide a single audio-visual signal. Thus, the copy protection data CP DATA is included in the single audio-visual signal. Combiner  204  may include several processors, such as multiplexers and other processors, necessary to provide the single audio-visual signal.  
         [0037]    The single audio-visual signal is then provided to a receiver  206  via a link  208 . As with link  108  of FIG. 1, link  208  can include one or more communication mediums or systems, or both, and supporting apparatuses that are configured to carry the single audio-visual signal between transmitter  202  and receiver  206 . Examples of link  208  include, but are not limited to, a telephone system, a cable television system, a broadcast television system (direct or indirect), a satellite broadcast system (direct or indirect), one or more computer networks and/or buses, the Internet, an intranet, and any software, hardware and other communication systems and equipment associated therewith for transmitting encoded data between two locations,  
         [0038]    When receiver  206  receives the audio-visual signal via link  208 , the copy protection data CP DATA is removed from the audio-visual signal by processor  210 . For applications where the audio-visual signal on link  208  is formatted in packets, processor  210  extracts one or more data packets containing the copy protection data CP DATA from the audio-visual signal and replaces them with data packets containing predetermined data, such as NULL values. For example, data packets containing copy protection data CP DATA may have a predetermined data packet identification, so that they can be easily identified by processor  210 .  
         [0039]    Then the single audio-visual signal is provided to a replaceable security module  212  via an interface  214 . For IS679 applications, replaceable security module  212  is a smart card or a PCMCIA card that is communicatively coupled to receiver  206  via an IS679 compatible interface  214 . Replaceable security module  212  includes a de-scrambler  216  that removes the encryption placed into the encoded audio signals AS 1 , AS 2  through AS N  and video signals VS 1 , VS 2  through VS N  by scramblers S 1 , S 2  through S N .  
         [0040]    The de-scrambled single audio-visual signal is then returned to receiver  206  via interface  214 . Thus, the de-scrambled audio-visual signal received by receiver  206  from replaceable security module  212  does not contain the encryption provided by scramblers S 1 , S 2  through S N  but does still contain the copy protection applied by function modules F 1 , F 2  through F N .  
         [0041]    The de-scrambled audio-visual signal is then provided to function block F −1  that applies an inverse function to F −1  to remove the copy protection applied by function modules F 1 , F 2  through F N  using the copy protection data CP DATA that was extracted from the audio-visual signal by processor  210 . According to the preferred embodiment of the present invention, function block F −1  bases the application of the inverse function F −1  to the de-scrambled audio-visual signal on the presence of data packets containing the predetermined value. For example, when function block F −1  identifies a data packet that contains the predetermined value, the new copy protection data CP DATA retained by receiver  206  is used by function block F −1  to apply the inverse function F −1  to the subsequent data packets until the next data packet containing the predetermined value is identified.  
         [0042]    The de-scrambled audio-visual signal is then decoded by a decoder  218  contained in receiver  106 . The de-scrambled and decoded audio-visual signal is then provided to a display  220  to be displayed or otherwise viewed.  
         [0043]    This approach of the preferred embodiment of the present invention provides several important advantages over prior approaches for providing copy protection of audio-signal. First, this approach provides a higher level of security than the prior art approach described with reference to FIG. 1, because the de-scrambled signal provided by replaceable security module  212  contains the copy protection provided by function modules F 1 , F 2  through F N , but does not contain the copy protection data CP DATA, which was removed by processor  210 . Once removed from the audio-visual signal, the copy protection data CP DATA is maintained internally in receiver  206 . Thus, the de-scrambled signal provided by replaceable security module  212  cannot be used by other receivers and/or recording devices, even those that contain a function block equivalent to function block F −1  because they will not have access to copy protection data CP DATA, which can be periodically changed.  
         [0044]    In addition, this copy protection approach is very flexible and allows receiver manufacturers to continue a standard design without special components or algorithms, since processor  210  and function block F −1  may be implemented as standard components. The copy protection functionality, including the level of copy protection, is defined by the copy protection data CP DATA provided to transmitter  202 .  
         [0045]    Thus, function modules F 1 , F 2  through F N  may perform a relatively simple function, such as an exclusive OR logical operation (XOR). The advantage of using a simple function is that relatively fewer system resources are required to implement the F and F −1  functions compared to conventional approaches that use sophisticated encryption algorithms. However, more exotic functions may be used depending upon the level of copy protection desired for a particular application. In the context of MPEG2 encoding, a single packet of 184 bytes of data may be used to perform an XOR function of 64 to 1000 bits. Moreover, the copy protection data CP DATA may be changed as frequently as needed upon the requirements of a particular application.  
         [0046]    According to a second preferred embodiment of the present invention, the copy protection data CP DATA is not included in the audio-visual signal, but instead is generated internally by the receiver and provided to the replaceable security module. FIG. 3 is a block diagram of an arrangement  300  that illustrates this approach. A receiver  302  receives an audio-visual signal (AVS) that is provided to a replaceable security module  304  via an IS679 interface  306 .  
         [0047]    Replaceable security module includes a de-scrambler  308  for de-scrambling the AVS signal. The AVS is then provided to a function module F that copy protects the AVS by applying a function to AVS using copy protection data to generate a processed AVS. The CP DATA is randomly generated by receiver  302  and provided to replaceable security module  302 .  
         [0048]    The processed AVS is provided back to receiver  302  via interface  306  where a function module F −1  applies a function using the copy protection data CP DATA to remove the copy protection previously applied by function module F. The AVS data is then decoded by a decoder D and provided to display  310  to be displayed or otherwise viewed. This approach avoids having to include the copy protection data CP DATA in the AVS. Since the copy protection data CP DATA can be randomly generated, the use of specialized components or algorithms in receiver  302  is still avoided.  
         [0049]    Although embodiments of the invention have been described herein in the context of providing copy protection for the IS679 interface application, the approaches described herein are applicable to other audio-visual arrangements. In addition, the approaches described herein are applicable to other types of signals and information besides audio-visual signals.  
         [0050]    The various components described above may be implemented as discrete hardware components, one or more software processes, or a combination of discrete hardware components and on or more software processes. In this regard, FIG. 4 is a block diagram that illustrates a computer system  400  upon which an embodiment of the invention may be implemented.  
         [0051]    Computer system  400  includes a bus  402  or other communication mechanism for communicating information, and a processor  404  coupled with bus  402  for processing information. Computer system  400  also includes a main memory  406 , such as a random access memory (RAM) or other dynamic storage device, coupled to bus  402  to storing information and instructions to be executed by processor  404 . Main memory  406  also may be used for storing temporary variables or other intermediate information during execution of instructions to be executed by processor  404 .  
         [0052]    Computer system  400  further includes a read only memory (ROM)  408  or other static storage device coupled to bus  402  for storing static information and instructions for processor  404 . A storage device  410 , such as a magnetic disk or optical disk, is provided and coupled to bus  402  for storing information and instructions.  
         [0053]    Computer system  400  may be coupled a via bus  402  to a display  412 , such as a cathode ray tube (CRT), for displaying information to a computer user. An input device  414 , including alphanumeric and other keys, is coupled to bus  402  for communicating information and command selections to processor  404 . Another type of user input device is cursor control  416 , such as a mouse, a trackball, or cursor direction keys for communicating direction information and command selections to processor  404  and for controlling cursor movement on display  412 . This input device typically has two degrees of freedom in two axes, a first axis (e.g., x) and a second axis (e.g., y), that allows the device to specify positions in a plane.  
         [0054]    The embodiments of the present invention are related to the use of computer systems  400  for providing copy protection of audio-visual signals in IS679 applications. According to one preferred embodiment of the invention, the copy protection of audio-visual signals in IS679 applications is provided by computer system  400  in response to processor  404  executing one or more sequences of one or more instructions contained in memory  406 . Such instructions may be read into main memory  406  from another computer-readable medium, such as storage device  410 . Execution of the sequences of instructions contained in main memory  406  causes processor  404  to perform the process steps described herein. One or more processors in a multi-processing arrangement may also be employed to execute the sequences of instructions contained in main memory  406 . In alternative embodiments, hard-wired circuitry may be used in place of or in combination with software instructions to implement the embodiments of the present invention. Thus, embodiments of the present invention are not limited to any specific combination of hardware circuitry and software.  
         [0055]    The term “Computer-readable medium” as used herein refers to any medium that participates in providing instructions to processor  404  for execution. Such a medium may take many forms, including but not limited to, non-volatile media, volatile media, and transmission media. Non-volatile media includes, for example, optical or magnetic disks, such as storage device  410 . Volatile media includes dynamic memory, such as main memory  406 . Transmission media includes coaxial cables, copper wire and fiber optics, including the wires that comprise bus  402 . Transmission media can also take the form of acoustic or light waves, such as those generated during radio wave and infrared data communications.  
         [0056]    Common forms of computer-readable media include, for example, a floppy disk, a flexible disk, hard disk, magnetic tape, or any other magnetic medium, a CD-ROM, any other optical medium, punch cards, paper tape, any other physical medium with patterns of holes, a RAM, PROM, and EPROM, a FLASH-EPROM, any other memory chip or cartridge, a carrier wave as described hereinafter, or any other medium from which a computer can read.  
         [0057]    Various forms of computer readable media may be involved in carrying one or more sequences of one or more instructions to processor  404  for execution. For example, the instructions may initially be carried on a magnetic disk of a remote computer. The remote computer can load the instructions into its dynamic memory and send the instructions over a telephone line using a modem. A modem local to computer system  400  can receive the data on the telephone line and use an infrared transmitter to convert the data to an infrared signal. An infrared detector coupled to bus  402  can receive the data carried in the infrared signal and place the date on bus  402 . Bus  402  carries the data main memory  406 , from which processor  404  retrieves and executes the instructions. The instructions received by main memory  406  may optionally be stored on storage device  410  either before or after execution by processor  404 .  
         [0058]    Computer system  400  also includes a communication interface  418  coupled to bus  402 . Communication interface  418  provides a two-way data communication coupling to a network link  420  that is connected to a local network  422 . For example, communication interface  418  may be an integrated services digital network (ISDN) card or a modem to provide a data communication connection to a corresponding type of telephone line. As another example, communication interface  418  may be a local area network (LAN) card to provide a data communication connection to a compatible LAN. Wireless links may also be implemented. In any such implementation, communication interface  418  sends and receives electrical, electromagnetic or optical signals that carry digital data streams representing various types of information.  
         [0059]    Network link  420  typically provides data communication through one or more networks to other data devices. For example, network link  420  may provide a connection through local network  422  to a host computer  424  or to data equipment operated by an Internet Service Provider (ISP)  426 . ISP in turn provides data communication services through the world wide packet data communication network now commonly referred to as the “Internet”  428 . Local network  422  and Internet  428  both use electrical, electromagnetic or optical signals that carry digital data streams. The signals through the various networks and the signals on network link  420  and through communication interface  418 , which carry the digital data to and from computer systems  400 , are exemplary forms of carrier waves transporting the information.  
         [0060]    Computer system  400  can send messages and receive data, including program code, through the network(s), network link  420  and communication interface  418 . In the Internet example, a server  430  might transmit a requested code for an application program through Internet  428 , ISP  426 , local network  422  and communication interface  418 . In accordance with the invention, one such downloaded application provides for providing copy protection of audio-visual signals in IS679 applications as described herein.  
         [0061]    The received code may be executed by processor  404  as it is received, and/or stored in storage device  410 , or other non-volatile storage for later execution. In this matter, computer systems  400  may obtain application code in the form of a carrier wave.  
         [0062]    In the foregoing specification, the invention has been described with reference to specific embodiments thereof. It will, however, be evident that various modifications and changes may be made thereto without departing from the broader spirit and scope of the invention. The specification and drawings are, accordingly, to be regarded in an illustrative rather than a restrictive sense.