Capability revocation in a content consumption device
AssigneeNagravision S.A.
InventorsJean-Bernard Fischer, Patrick Servet, Didier Hunacek
Life of this patent
Estimating the term…
Abstract
Methods and content consumption devices are disclosed that enable a revocation list to be securely enforced and managed, in terms of enforcing version control and providing granular control of individual capabilities, for example. Aspects also relate to enhanced enforcement control of content consumption control information more generally, for example by enforcing version control of activation messages, and/or granular management of individual capabilities.
Claims15
A method of enforcing a revocation list at a content consumption device, the method
- comprising:
- receiving and authenticating a device certificate, wherein the device certificate comprises device information identifying the content consumption device;
- receiving and authenticating a revocation list identifying one or more respective device capabilities that have been revoked from one or more devices;
- determining revocation information identifying revoked capabilities for the content consumption device using the device information and the revocation list;
- receiving a message comprising capability verification information and an decryption key required to enable descrambling of scrambled content;
- and
- applying an operation to the capability verification information and revocation information to determine if the content consumption device can use the decryption key to enable descrambling of the content.
A content consumption device comprising:
- one or more receiver modules configured to receive
- scrambled content and
- a message comprising capability verification information and a decryption key required to enable descrambling of the scrambled content;
- a memory configured to store
- a device certificate, wherein the device certificate comprises device information identifying the content consumption device, and
- a revocation list identifying one or more respective device capabilities that have been revoked from one or more devices;
- and
- a processing module configured to enforce the revocation list, the processing module being configured to:
- receive and authenticate the device certificate;
- receive and authenticate the revocation list;
- receive the message;
- determine revocation information identifying revoked capabilities for the content consumption device using the device information and the revocation list;
- and
- apply an operation to the capability verification information and revocation information to determine if the content consumption device can use the decryption key to enable descrambling of the content.
Dependencies are inferred from the claim text.