# US 8,789,165 B2 · Method for detecting potentially suspicious operation of an electronic device and corresponding electronic device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,789,165 B2 - Document ID: US8789165B2 - Status: Granted - Kind: B2 - Application number: 13/027,834 - Filed: 2011-02-15 - Published: 2011-08-18 - Granted: 2014-07-22 - Earliest claimed: 2010-02-16 - Assignees: STMicroelectronics (Rousset) SAS; STMicroelectronics S.r.l. - Applicants: Marco Bildgen; Jean Devin - Inventors: Marco Bildgen; Jean Devin - Web page: https://patentgrep.com/patent/US8789165B2 ## CPC - H04N 7/1675: {Providing digital key or authorisation information for generation or regeneration of the scrambling sequence (pseudo-random number generators in general G06F7/58)} - G06F 21/552: {involving long-term monitoring or reporting} - G06F 21/77: in smart cards - H04L 9/004: {for fault attacks} - H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]} - H04L 63/1441: {Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002)} - H04N 21/4181: {for conditional access} - H04N 21/4424: {Monitoring of the internal components or processes of the client device, e.g. CPU or memory load, processing speed, timer, counter or percentage of the hard disk space used (error monitoring in general G06F11/30; arrangements for monitoring conditions of receiving stations in broadcast systems H04H60/32; diagnosis, testing or measuring for television receivers H04N17/04)} - H04N 21/4432: {Powering on the client, e.g. bootstrap loading using setup parameters being stored locally or received from the server (resetting in general G06F1/14; program loading or initiating in general G06F9/445; bootstrapping in general G06F9/4401; secure boots of computer platforms G06F21/57)} - H04N 21/4623: Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] {(arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14)} - G06F 21/109: {by using specially-adapted hardware at the client} - G06F 2221/2105: Dual mode as a secondary aspect - G06F 2221/2151: Time stamp - G06F 2221/2153: Using hardware token as a secondary aspect - H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method may be for detecting potentially suspicious operation of an electronic device configured to operate in the course of activity sessions. The method may include within the device, a metering, from an initial instant of the number of activity sessions having a duration below a first threshold, and a comparison of this number with a second threshold. ## Claims ### Claim 1 A method for detecting unauthorized operation of an integrated circuit (IC) card for a television set-top receiver operating based upon a plurality of activity sessions, the method comprising: in the IC card, measuring a time duration of each activity session; in the IC card, measuring a number of activity sessions each having a time duration below a first threshold, each activity session starting with an initialization signal and associated with a respective channel; and in the IC card, comparing the number of activity sessions having the time duration below the first threshold with a second threshold. ### Claim 2 (depends on 1) The method according to claim 1 further comprising operating the IC card in a first mode of operation, and switching the IC card to a second mode of operation different from the first mode of operation if the number of activity sessions having the time duration below the first threshold is above the second threshold. ### Claim 3 (depends on 2) The method according to claim 2 wherein the measuring comprises: during a current activity session, at least performing allocating a first value to a binary indicator, if the current activity session has a time duration greater than or equal to the first threshold, holding the first value for the binary indicator during the current activity session for a period equal to the first threshold and then allocating a second value to the binary indicator, and if the current activity session has a time duration below the first threshold, holding the binary indicator at the first value after the end of the current activity session and at least until the occurrence of the following activity session; upon the occurrence of the following activity session with the binary indicator having the first value, allocating the first value to a new binary indicator of greater rank than a rank of the binary indicator; and determining of a number of binary indicators having the first value. ### Claim 4 (depends on 3) The method according to claim 3 wherein the measuring comprises upon the occurrence of the following activity session with the binary indicator having the second value, performing the allocating and holding for the binary indicator of lowest rank with the second value. ### Claim 5 (depends on 3) The method according to claim 3 wherein the measuring further comprises when the time duration of the current activity session is below the first threshold, holding the binary indicator at the first value for a holding period. ### Claim 6 (depends on 5) The method according to claim 5 wherein when the first value has been allocated to at least two binary indicators of successive ranks, the binary indicator of lowest rank is held at first value for the holding period expiring on completion of a residual period after the other binary indicator has retaken the second value. ### Claim 7 (depends on 3) The method according to claim 3 wherein each activity session comprises a startup sequence, and a working sequence thereafter; and wherein when in the second mode of operation, a time duration of the startup sequence is forced to a value greater than that of the startup sequence in the first mode of operation. ### Claim 8 (depends on 7) The method according to claim 7 wherein the time duration of each new startup sequence is increased as the number of binary indicators having the first value increases beyond the second threshold. ### Claim 9 (depends on 1) The method according to claim 1 further comprising storing in a non-volatile memory the number of activity sessions having the time duration below the first threshold. ### Claim 10 (depends on 9) The method according to claim 9 further comprising storing in an electrically programmable and erasable non-volatile memory the number of activity sessions having the time duration below the first threshold. ### Claim 11 An integrated circuit (IC) for an IC card for a television set-top receiver comprising: a processor configured to operate based upon a plurality of activity sessions, each activity session starting with an initialization signal and associated with a respective channel; a monitor circuit configured to measure a time duration of each activity session, and measure, in the plurality of activity sessions, a number of activity sessions having a time duration below a first threshold; a memory configured to store a value representative of the number of activity sessions having the time duration below the first threshold; and a comparator configured to compare the number of sessions having the time duration below the first threshold with a second threshold. ### Claim 12 (depends on 11) The IC according to claim 11 wherein said processor is configured to operate in a first mode of operation; and further comprising a controller configured to switch said processor to a second mode of operation different from the first mode of operation if the number of activity sessions having the time duration below the first threshold is above the second threshold. ### Claim 13 (depends on 11) The IC according to claim 11 wherein said monitor circuit comprises: a management circuit configured to: during a current activity session, at least perform allocating a first value to a binary indicator, if the current activity session has a time duration greater than or equal to the first threshold, holding the first value for the binary indicator during the current activity session for a period equal to the first threshold and then allocating a second value to the binary indicator, and if the current activity session has a time duration below the first threshold, holding the binary indicator at the first value after the end of the current activity session and at least until the occurrence of the following activity session, and upon the occurrence of the following activity session with the binary indicator having the first value, allocating the first value to a new binary indicator of greater rank than a rank of the binary indicator; and a counter configured to count the number of binary indicators having the first value. ### Claim 14 (depends on 13) The IC according to claim 13 wherein said management circuit is configured to upon the occurrence of the following activity session with the binary indicator having the second value, perform the allocating and holding for the binary indicator of lowest rank with the second value. ### Claim 15 (depends on 13) The IC according to claim 13 wherein said management circuit is configured to when the time duration of the current activity session is below the first threshold, hold the binary indicator at the first value for a holding period. ### Claim 16 An integrated circuit (IC) card for a television set-top receiver comprising: a processor configured to operate based upon a plurality of activity sessions, each activity session starting with an initialization signal and associated with a respective channel, measure a time duration of each activity session, and measure a number of activity sessions having a time duration below a first threshold; a memory configured to store a value representative of the number of activity sessions having the time duration below the first threshold; and a comparator configured to compare the number of sessions having the time duration below the first threshold with a second threshold. ### Claim 17 (depends on 16) The IC card according to claim 16 wherein said processor is configured to operate in a first mode of operation and to switch said processor to a second mode of operation different from the first mode of operation if the number of activity sessions having the time duration below the first threshold is above the second threshold. ### Claim 18 (depends on 16) The IC card according to claim 16 wherein said processor comprises: a management circuit configured to: during a current activity session, at least perform allocating a first value to a binary indicator, if the current activity session has a time duration greater than or equal to the first threshold, holding the first value for the binary indicator during the current activity session for a period equal to the first threshold and then allocating a second value to the binary indicator, and if the current activity session has a time duration below the first threshold, holding the binary indicator at the first value after the end of the current activity session and at least until the occurrence of the following activity session, and upon the occurrence of the following activity session with the binary indicator having the first value, allocating the first value to a new binary indicator of greater rank than a rank of the binary indicator; and a counter configured to count the number of binary indicators having the first value. ### Claim 19 An integrated circuit (IC) for a television set-top receiver comprising: a processor configured to operate based upon a plurality of activity sessions, each activity session starting with an initialization signal and associated with a respective channel, measure a time duration of each activity session, and measure a number of activity sessions having a time duration below a first threshold; a memory configured to store a value representative of the number of activity sessions having the time duration below the first threshold; and a comparator configured to compare the number of sessions having the time duration below the first threshold with a second threshold. ### Claim 20 (depends on 19) The IC according to claim 19 wherein said processor is configured to operate in a first mode of operation and to switch said processor to a second mode of operation different from the first mode of operation if the number of activity sessions having the time duration below the first threshold is above the second threshold. ### Claim 21 (depends on 19) The IC according to claim 19 wherein said processor comprises: a management circuit configured to: during a current activity session, at least perform allocating a first value to a binary indicator, if the current activity session has a time duration greater than or equal to the first threshold, holding the first value for the binary indicator during the current activity session for a period equal to the first threshold and then allocating a second value to the binary indicator, and if the current activity session has a time duration below the first threshold, holding the binary indicator at the first value after the end of the current activity session and at least until the occurrence of the following activity session, and upon the occurrence of the following activity session with the binary indicator having the first value, allocating the first value to a new binary indicator of greater rank than a rank of the binary indicator; and a counter configured to count the number of binary indicators having the first value. ### Claim 22 (depends on 15) The IC according to claim 15 wherein when the first value has been allocated to two binary indicators of successive ranks, said management circuit is configured to hold the binary indicator of lowest rank at the first value for the holding period expiring on completion of a residual period after the other binary indicator has retaken the second value. ### Claim 23 (depends on 13) The IC according to claim 13 wherein each activity session comprises a startup sequence, and a working sequence thereafter; and wherein when in the second mode of operation, said controller is configured to force a time duration of the startup sequence to a value above that of the startup sequence in the first mode of operation. ### Claim 24 (depends on 17) The IC according to claims 17 wherein said controller is configured to increase the time duration of each new startup sequence as the number of binary indicators having the first value increases beyond the second threshold. ### Claim 25 (depends on 11) The IC according to claim 11 wherein said memory comprises a nonvolatile memory. ### Claim 26 (depends on 25) The IC card according to claim 25 wherein said nonvolatile memory comprises an electrically programmable and erasable nonvolatile memory.