SMART CARD CHAINING IN PAY TELEVISION SYSTEMSFIELD OF THE INVENTIONThe present invention relates to pay television systems generally and more particularly to systems for controlling access to pay television transmissions.
BACKGROUND OF THE INVENTIONMany pay television systems today employ "smart cards'1 which are cards of the size of credit cards that include integrated circuits (IC). Typically, the smart cards are used to enable access to television transmissions. In such a case, a subscriber inserts a smart card in a slot in a cable television decoder to allow access to television transmissions.
Usually, one smart card is associated with one television (TV) set and the subscriber receives one smart card upon payment of a subscription fee.
The subscriber may also purchase, at a reduced price, additional smart cards for use with other TV sets in his house.
In such a case, there is a possibility that the subscriber may try to purchase many cards, and sell most of them to other people at a price which is lower than the regular price, but higher than the price that the subscriber has paid for them. This may cause substantial losses to operators of television transmission systems.
In a co-pending U.S. patent application to Doron Handelman et al.,Ser. No. 08/375,995 filed on January 20, 1995, entitled "Secure Access Systems", and assigned to the same assignee as the present application, as well as in corresponding European application 95115554.8 filed on October 2, 1995, there is described a parental control system which utilizes two smart cards that are inserted in a decoder. When one of the cards, which is a main card, is inserted in the decoder, access is enabled to non-restricted programs only. When both cards are inserted in the decoder, access is enabled to restricted programs as well as to non-restricted programs.
SUMMARY OF THE INVENTION 'i . present invention seeks to provide systems and methods for controlling access to pay television transmissions at a site in which a plurality of pay television decoders are placed.
There is thus provided in accordance with a preferred embodiment of the present invention a pay television system including:a pay television network;a subscriber unit which receives pay television transmissions via the pay television network and displays the pay television transmissions on televisions coupled thereto, the subscriber unit including at least two pay television decoders, wherein a first decoder includes a first card reader and a second decoder includes a second card reader;a first smart card which is operative, upon insertion in a first slot in the first card reader, to activate decoding of the pay television transmissions in the first decoder; anda second smart card which is operative, upon insertion in a second slot in the second card reader, to activate decoding of the pay television transmissions in the second decoder, whereinthe second smart card is operable to deactivate in accordance with predetermined criteria, and to reactivate upon insertion in the first slot in the first card reader after removal of the first smart card from the first card reader.
Preferably, the predetermined criteria include at least one of a predetermined time and a predetermined date.
In accordance with a preferred embodiment of the present invention the predetermined criteria include a predetermined date, and the first smart card is operable to deactivate at a first deactivation date, the second smart card is operable to deactivate at a second deactivation date, and the first deactivation date is later than the second deactivation date.
Preferably, at least one of the first smart card and the second smart card is also operable to control access to a vi:;o-cassette-recorder for recording pay television transmissions.
Further in accordance with a preferred embodiment of the present invention the second smart card receives, upon reactivation, a new deactivation date which is later than the second deactivation date. The new deactivation date is provided by one of the first decoder, the first smart card and a pay television headend.
Preferably, the new deactivation date is provided by adding a time increment to a current system time, and calculation of the new deactivation date is performed at one of the first decoder, the first smart card, and the headend.
In accordance with a preferred embodiment of the present invention reactivation of the second smart card includes transmission of chaining data, the chaining data including one of a signature, a key and a seed which is operable to at least one of validate, identify, verify and authenticate the second smart card.
The chaining data also includes a digital representation of a time increment which is associated with a current system time to provide a deactivation date.
In a preferred embodiment of the invention the one of a signature, a key and a seed is identical for the first smart card and for the second smart card.
Further in accordance with a preferred embodiment of the present invention the predetermined criteria include a predetermined date, and the second smart card is operable to deactivate at any time of day during the predetermined date.
In a preferred embodiment of the present invention the first smart card and the second smart card are interchangeable.
There is also provided in accordance with a preferred embodiment of the present invention a pay television decoder including:a smart card reader including a smart card slot via which a first smart card is read; a decoder memory, coupled to the smart card reader, which is operable to store one of a signature, a key and a seed identifying the first smart card; anda decoder processor, coupled to the decoder memory, which is operable to calculate a deactivation date based on data received from one of the first smart card, a pay television headend and the decoder memory, whereinthe decoder processor is operable to provide the deactivation date to a second smart card, when the second smart card is inserted in the smart card slot and read via the smart card reader, in response to a match between the one of a signature, a key and a seed identifying the first smart card and a corresponding one of a signature, a key and a seed identifying the second smart card.
In accordance with another preferred embodiment of the present invention there is provided a pay television decoder including:a smart card reader including a smart card slot via which a first smart card is read; anda decoder memory, coupled to the smart card reader, which is operable:to store a deactivation date of a second smart card, and one of a signature, a key and a seed identifying the first smart card,to provide the one of a signature, a key and a seed identifying the first smart card to the second smart card, when the second smart card is inserted in the smart card slot in the smart card reader, in response to a first instruction transmitted by the second smart card, andto provide the deactivation date to the second smart card in response to a second instruction transmitted by the second smart card.
Preferably, the second instruction is transmitted in response to a match between the one of a signature, a key and a seed identifying the first smart card, and a corresponding one of a signature, a key and a seed identifying the second smart card.
There is also provided in accordance with a preferred embodiment of the present invention a pay television access control method to be employed in a pay television system in which pay television programs are transmitted to a plurality of subscribers, each being entitled to receive selected programs, the method including:providing a first decoder activated by a first smart card to decode pay television transmissions, and a second decoder activated by a second smart card to decode pay television transmissions;deactivating the second smart card in accordance with predetermined criteria;removing the first smart card from a first card reader in the first decoder; andreactivating the second smart card by inserting the second smart card in the first card reader of the first decoder.
Preferably, the predetermined criteria include at least one of a predetermined time and a predetermined date.
Further in accordance with a preferred embodiment of the present invention the predetermined criteria include a predetermined date, and the method includes deactivating the first smart card at a first deactivation date, and deactivating the second smart card at a second deactivation date, wherein the first deactivation date is later than the second deactivation date.
Preferably, the method also includes supplying a new deactivation date to the second smart card upon reactivation. The supplying step includes adding a time increment to a current system time.
There is also provided in accordance with a preferred embodiment of the present invention a pay television access control method including:providing, in a pay television decoder, a smart card reader including a smart card slot via which a first smart card is read, and a decoder melnosJ, coupled to the smart card reader, which is operable to store o e of a signature, a key and a seed identifying the first smart card;coupling, to the decoder memory, a decoder processor which is operable to calculate a deactivation date based on data received from one of the first smart card, a pay television headend and the decoder memory;inserting in the smart card slot in the smart card reader a second smart card; andproviding the deactivation date to the second smart card in response to a match between the one of a signature, a key and a seed identifying the first smart card and a corresponding one of a signature, a key and a seed identifying the second smart card.
In accordance with another preferred embodiment of the present invention there is provided a pay television access control method including:providing, in a pay television decoder, a smart card reader including a smart card slot via which a first smart card is read, and a decoder memory coupled to the smart card reader;storing, in the decoder memory, a deactivation date of a second smart card, and one of a signature, a key and a seed identifying the first smart card;inserting the second smart card in the smart card slot in the smart card reader;supplying the one of a signature, a key and a seed identifying the first smart card to the second smart card in response to a first instruction transmitted by the second smart card; andtransmitting the deactivation date to the second smart card in response to a second instruction generated by the second smart card.
Further in accordance with another preferred embodiment of the present invention there is provided a pay television access control method including: providing a decoder including a decoder memory and a smart card reader;inserting a first smart card in the smart card reader;transferring, from the first smart card to the decoder memory, chaining data for activating a second smart card;removing the first smart card from the smart card reader;inserting the second smart card in the smart card reader;transmitting, from the decoder memory to the second smart card, the chaining data; andenabling the chaining data to activate the second smart card.
BRIEF DESCRIPTION OF THE DRAWINGSThe present invention will be understood and appreciated more fully from the following detailed description, taken in conjunction with the drawings in which:Fig. 1 is a generalized illustration of a portion of a pay television system installed at a subscriber residence and constructed and operative in accordance with a preferred embodiment of the present invention; andFigs. 2A and 2B together constitute a flowchart illustrating a preferred method of operation of the system of Fig. 1 in accordance with a preferred embodiment of the present invention.
DETAILED DESCRIPTIC OF PREFERRED EMBODIMENTSReference is now made to Fig. 1, which is a generalized illustration of a portion of a pay television system constructed and operative in accordance with a preferred embodiment of the present invention.
Throughout the specification and claims the term "pay television" is used in a broad sense to include one-way and two-way cable television as well as satellite television, CATV, and pay television generally.
In the pay television system, pay television programs are transmitted to a plurality of subscriber units via a pay television network.
Typically, some of the subscribers purchase more than one decoder to be installed in each room in a subscriber residence in which television sets are present. The decoders are operative to decode pay television transmissions and are each activated by a smart card.
The term "decode" in all of its forms is used throughout the specification and claims in a broad sense to cover all forms of data decoding, ranging from simple descrambling or decoding to decryption.
For the purposes of the present invention, the term 11activate" in all of its forms, and taken in conjunction with a smart card, is used throughout the specification and claims to include enabling the smart card to perform access control functions which may include decoding, descrambling and decryption of information.
The term "deactivate" in all of its forms, and taken in conjunction with the smart card, is used to include preventing the smart card from performing the access control functions.
In a preferred embodiment of the present invention a subscriber unit includes a decoder 10 which is coupled to a television set 12, and a decoder 14 which is coupled to a television set 16.
Decoder 10 and television 12 are preferably placed in a room A at a subscriber residence, and decoder 14 and television 16 are placed in a room B at the subscriber residence. Decoders 10 and 14 are each operative to receive pay television transmissions from the pay television network.
Preferably, decoder 10 is activated by a smart card 18 which is inserted in a smart card slot 20 in decoder 10, and decoder 14 is activated by a smart card 22 which is inserted in a smart card slot 24 in decoder 14.
Each of smart cards 18 and 22 includes a processor (not shown) and a memory (not shown), as is well known in the art. Smart cards 18 and 22 employ information which is transmitted via the pay television network and received at the corresponding decoders 10 and 14 to generate a decoding or decryption key which is used to decode pay television transmissions. For that purpose, smart cards 18 and 22 perform an algorithm which is processed by each of the smart card processors, as is well known in the art.
Smart cards 18 and 22 communicate with the corresponding decoders 10 and 14 via smart card readers (not shown) which form part of decoders 10 and 14 respectively. When inserted in the corresponding slots 20 and 24, smart cards 18 and 22 are electrically connected to the respective smart card readers.
Preferably, decoder 10 includes a decoder processor 26 and a decoder memory 28 which is coupled to decoder processor 26. Decoder 14 includes a decoder processor 30 and a decoder memory 32 which is coupled to decoder processor 30. The smart card readers (not shown) which form part of decoders 10 and 14 are respectively coupled to decoder processors 26 and 30.
In a preferred embodiment of the present invention the smart card readers may provide information received at decoders 10 and 14 from the pay television network to smart cards 18 and 22, and may provide information read from smart cards 18 and 22 to decoders 10 and 14.
The information communicated to and from smart cards 18 and 22 may include data which is employed to generate the key, entitlements, clock data and messages such as invalidation of a card.
If one of smart cards 18 and 22 becomes invalid, the key which is generated by the corresponding smart card processor does not decode the pay television transmissions, and access to the pay television transmissions is denied.
Alternatively, any other appropriate means of preventing access to the pay television transmissions may be employed such as, for example: the corresponding smart card processor may fail to generate a key; or the corresponding smart card processor may generate a key but may not communicate the generated key for further processing.
Typically, the smart cards are purchased from a pay television vendor. When purchased, the vendor typically activates the cards by passing them through an activating machine (not shown) which applies an activation algorithm. In a preferred embodiment of the present invention the cards remain active until certain predetermined criteria occur which turn the cards invalid.
Usually, purchasing a smart card is associated with a subscription to pay TV services. When the subscriber purchases more than one smart card, he typically pays less for a second subscription than for a first subscription.
Generally, a smart card is not uniquely associated with a specific decoder. Therefore, a valid smart card may activate any decoder of the type to which it fits. In such a case, there is a possibility that a subscriber may purchase several smart cards at a reduced price and sell them, at a price which is higher than the reduced price but still less than the full price, to other people. The system and method of the present invention may be employed to prevent such cases.
Reference is now made to Figs. 2A and 2B which together form a flowchart illustration of a preferred method of operation of the system of Fig. 1.
In accordance with a preferred embodiment of the present invention a first smart card and a second smart card which are active, may be deactivatecl .:: accordance with predetermined criteria. Preferably, the predetermined criteria may include a predetermined date and/or a predetermined time. However, other criteria may be employed, such as number of purchases of premium programs and/or amounts of money spent.
If the predetermined criteria include predetermined date criteria, the first smart card may include a predetermined first deactivation date and the second smart card may include a predetermined second deactivation date. Each of the deactivation dates may be stored in a memory zone in the corresponding smart card by passing the smart cards through a machine (not shown), such as the activating machine mentioned with reference to Fig. 1.
The machine, typically controlled by an algorithm in software, preferably burns data related to the deactivation dates into corresponding memory zones in the first and second smart cards. It is to be appreciated that the memories of the first and second smart cards may be of the EEPROM (Electronic ErasableProgrammable Read Only Memory) type.
In another preferred embodiment of the present invention the above mentioned deactivation dates may be communicated to the first smart card and to the second smart card via the pay television network.
Preferably, the deactivation dates are maintained in terms of months or days. The first deactivation date and the second deactivation date may be different, and may be determined at time of purchase or at time of manufacture.
Generally, television programs are decoded in a first decoder and in a second decoder to which the first and second smart cards are respectively coupled until the earliest of the above mentioned deactivation dates elapses.
Assuming that the second deactivation date is earlier than the first deactivation date, the second smart card is the first to be deactivated. Deactivation of the second smart card preferably occur when a current system date matches or exceeds the second deactivation date. match may be found by comparison of the current system date to the deactivation date stored in the second smart card. Such comparison is typically performed in a processor which forms part of the second smart card as mentioned herein above with reference toFig. 1.
In another preferred embodiment of the present invention the processor which forms part of the second smart card may compare the current system date with a deactivation date which is received via the pay television network.
If a match is found between the current system date and the second deactivation date, or if the current system date exceeds the second deactivation date, the second smart card preferably generates a message which is displayed on a TV to which the second decoder is coupled. The message typically indicates that the second smart card is deactivated, and programming material is not decoded. It is to be appreciated that the first smart card remains active and programming material is decoded at the first decoder.
To reactivate the second smart card, a subscriber preferably removes the first smart card from a first slot in a first card reader in the first decoder and replaces it by the second smart card.
In a preferred embodiment of the present invention, the first smart card is operative, when inserted in the first slot, to transfer to the first decoder chaining data which is used to reactivate the second smart card, and the chaining data is transferred to the second smart card when the second smart card is inserted in the first slot. Alternatively, the first decoder may be programmed to include the data required for reactivation of the second smart card at entitlement time, which may be when the first decoder and the second decoder are purchased.
Further alternatively, the first decoder may include a plurality of smart card slots, and the second smart card may be inserted in an unfilled slot while the first smart card is inserted in the first slot, the chaining data being transferred from the first card to the second card via the decoder.
The chaining data may include a signature, a key or a seed which may be employed to at least one of validate, identify, verify and authenticate the second smart card. Preferably, the chaining data also includes a digital representation of a time increment which may be employed to calculate a deactivation date. The time increment is typically specified in months and days.
The signature is checked and compared for validity in a decoder processor which forms part of the first decoder, such as decoder processor 26 ofFig. 1. Alternatively, the processor which forms part of the second smart card may be operative to check validity of the signature received from the first decoder.
If validity is found, i.e. the signatures of the first smart card and the second smart card coincide, the decoder processor of the first decoder adds the time increment to the current system date to generate a new deactivation date.
Preferably, the new deactivation date is stored in another memory zone in the second smart card. Alternatively, the new deactivation date is communicated, via the pay television network, to a pay television headend (not shown), which may later use the new deactivation date to deactivate the second smart card when the new deactivation date elapses.
It is to be appreciated that a processor which forms part of the first smart card, rather than the decoder processor of the first decoder, may be operative to calculate the new deactivation date of the second smart card. In such a case the processor which forms part of the first smart card and the processor which forms part of the second smart card may communicate, via the first card reader, with a decoder memory which forms part of the first decoder, such as decoder memory 28 of Fig. 1. The decoder memory is preferably operable:to receive from the processor which forms part of the first smart card, and to store data including the new deactivation date of the second smart card, and one of a signature, a key and a seed identifying the first smart card;to provide the one of a signature, a key and a seed identifying the first smart card to the second smart card, when the second smart card is inserted in the first slot in the first decoder, in response to a first instruction transmitted by the second smart card; andto provide the new deactivation date to the second smart card in response to a second instruction transmitted by the second smart card.
Preferably, the second smart card transmits the second instruction to the decoder memory only if the signatures of the first smart card and the second smart card coincide. The new deactivation date which is received from the decoder memory is stored in the second smart card.
In another preferred embodiment of the present invention the new deactivation date is calculated in a headend processor which is located at the headend of the pay television systems, and the headend rather than the first smart card provides the new deactivation date to the decoder memory.
After the new deactivation date is stored in the second smart card, the decoder processor of the first decoder provides the second smart card an instruction which reactivates the second smart card. Alternatively, the decoder processor of the first decoder informs the headend that a new deactivation date is stored in the second smart card, and the headend transmits an instruction which reactivates the second smart card.
After the second smart card is reactivated, it may be removed from the first slot in the first decoder and inserted in the second decoder. Since the second smart card is reactivated, the pay television programs are decoded.
It is to be appreciated that various algorithms may be applied to calculate the new deactivation date. Such algorithms may include adding multiple time increments to the current system date, and adding a constant number of hours to the time increment to achieve deactivation at any selected time of a day.
In a preferred embodiment of the present invention the time increment may be modified by the decoder processor of the first decoder or programmed by the manufacturer or the pay television vendor. Preferably, variable time increments may be stored in the decoder memory which may be controlled by the decoder processor of the first decoder.
It is to be appreciated that the first and second smart cards are preferably linked together at entitlement time and thus the first smart card recognizes the signature of the second smart card and vice versa. If the chaining data is provided by a decoder rather than by a smart card, then the first and second decoders are preferably linked together at entitlement time, and the first and second smart cards receive the chaining data from the first and second decoders respectively when inserted in the respective decoders for the first time.
The new deactivation date may be later than the deactivation date of the first smart card. In such a case, when the deactivation date of the first smart card elapses and the first smart card is deactivated, the second smart card may reactivate the first smart card.
The above mentioned procedure is a chaining procedure which may be repeated many times, and for long periods. In such a procedure, each card may reactivate any number of cards which are linked thereto. It is to be appreciated that reactivation of a card may take less than a second, or a few seconds if communication with the headend is required as described herein above.
In a preferred embodiment of the present invention the two cards, i.e. the first smart card and the second smart card, are interchangeable, and the chaining procedure may initiate with the deactivation of the first smart card rather than the deactivation of the second smart card. It is to be appreciated that the first decoder and the second decoder are also interchangeable.
In another preferred embodiment of the present invention, the first smart card may reactivate the second smart card twice, three times, or more before the first smart card is reactivated. The time increment may be calculated so that no two chained cards deactivate at the same time. If such a principle is maintained, an active card in the chained cards may always reactivate a deactivated chained card.
The above mentioned chaining procedure gives the subscriber a very strong incentive to maintain both the first and second smart cards, and all cards chained to the first and second smart cards which he purchases from the vendor, in his residence in order to physically chain the cards at particular time periods. This makes it difficult, if not impossible, for the subscriber to sell one or more of the cards to another person.
In a preferred embodiment of the present invention the first and second smart cards may be also employed to control access to a VCR (VideoCassette Recorder) to allow or prevent recording of television programs. In such a case, when one of the cards is deactivated, television programs are not decoded and the VCR may record only non-intelligible material.
In another preferred embodiment of the present invention, the subscriber may postpone deactivation of a card whose deactivation date has elapsed for a period of a few hours by, for example, pressing a key (not shown) in a remote control (not shown) to prevent deactivation while he views a selected program. In such a case, the de
Typically, there is a tin; - delay between manufacturing of cards and sale of the cards to a subscriber. Since deactivation dates may be pre-selected at manufacturing time, such time delay may result in deactivation of the cards before the cards are purchased. In such a case, when a card is purchased, a new deactivation date may be calculated based on the current system time, and different time increments may be applied to each card.
It is appreciated that various features of the invention which are, for clarity, described in the contexts of separate embodiments may also be provided in combination in a single embodiment. Conversely, various features of the invention which are, for brevity, described in the context of a single embodiment may also be provided separately or in any suitable subcombination.
It will be appreciated by persons skilled in the art that the present invention is not limited by what has been particularly shown and described hereinabove. Rather the scope of the present invention is defined only by the claims which follow: