Conditional access method and system for intelligent operating system

A conditional access method for an intelligent operating system, wherein the method is implemented in a smart device that is equipped with the intelligent operating system and comprises a live broadcasting application module, a conditional access application module, a digital TV module, a media play module, a conditional access module, a trusted execution environment (TEE) and a security chip, and comprising:

• acquiring a channel program list and providing the acquired channel program list for the live broadcasting application module for display by means of the digital TV module;
• sending a switched channel program identifier to the media play module by means of the live broadcasting application module in response to a channel change instruction or a program play instruction of a user;
• acquiring all channel messages and a control management message by means of the digital TV module, wherein the channel messages comprise a channel program identifier and video stream identifier videoPid and audio stream identifier audioPid of all channels, and the control management message comprises a conditional access application identifier casId, an entitlement control message identifier ecmPid and an entitlement management message identifier emmPid;
• acquiring a video stream identifier videoPid, an audio stream identifier audioPid, a conditional access application identifier casId, an entitlement control message identifier ecmPid and an entitlement management message identifier emmPid of a channel program from the digital TV module according to the acquired channel program identifier, distributing a descrambler message DescramblerId required to be used by the channel program and sending the video stream identifier videoPid, the audio stream identifier audioPid, the conditional access application identifier casId, the entitlement control message identifier ecmPid, the entitlement management message identifier emmPid and the descrambler message DescramblerId of the channel to the conditional access module, by means of the media play module;
• selecting a conditional access application module that is registered in the intelligent operating system and matched with the conditional access application identifier casId according to the received conditional access application identifier casId and simultaneously sending the video stream identifier videoPid, the audio stream identifier audioPid, the entitlement control message identifier ecmPid, the entitlement management message identifier emmPid and the descrambler message DescramblerId of the channel to the conditional access application module, by means of the conditional access module;
• acquiring corresponding entitlement control message data ecm Data and entitlement management message data emm Data from the digital TV module according to the acquired entitlement control message identifier ecmPid and entitlement management message identifier emmPid, and sending the acquired corresponding entitlement control message data ecm Data and entitlement management message data emm Data, as well as the video stream identifier videoPid, the audio stream identifier audioPid and the descrambler message DescramblerId of the channel, to the conditional access module, by means of the conditional access application module;
• sending the entitlement control message data ecm Data and the entitlement management message data emm Data, as well as the video stream identifier videoPid, the audio stream identifier audioPid and the descrambler message DescramblerId of the channel, to a trusted application module in the trusted execution environment by means of the conditional access module;
• performing parse according to a preset mechanism by means of the trusted application module in the trusted execution environment to acquire a descrambled entitlement message in the entitlement management message, wherein if the descrambled entitlement message represents entitlement permission, encryption level keys EK1 and EK2 and an encryption control word ECW are acquired and sent to the security chip together with the video stream identifier videoPid, the audio stream identifier audioPid and the descrambler message DescramblerId;
• and
• controlling a descrambler specified by the descrambler message DescramblerId to descramble scrambled channel program data according to the encryption level keys EK1 and EK2, the encryption control word ECW, the video stream identifier videoPid and the audio stream identifier audioPid and playing video stream data and audio stream data that are descrambled according to the video stream identifier videoPid and the audio stream identifier audioPid, by means of the security chip.