Secure storage and replay of media programs using a hard-paired receiver and storage device

Abstract

A method and apparatus for storing and retrieving program material for subsequent replay is disclosed. The method comprises the steps of receiving a data stream comprising the program material encrypted according to a first encryption key, decrypting the program material; re-encrypting the program material according to a second encryption key; and storing the re-encrypted material in a media storage device. The program material is played back by retrieving the re-encrypted material from the media storage device and decrypting the re-encrypted program material. In one embodiment, the second encryption key is derived from metadata describing replay rights. In a further embodiment, the media storage device also stores the second encryption key which has been further encrypted by a key that is unique to the device used to receive the program material.

1 .- 33 . (canceled)  
   
   
       34 . A method of storing program material for subsequent replay, comprising the steps of: 
 receiving a data stream comprising program material encrypted according to a first encryption key and metadata including information describing replay rights for the program material;    decrypting the program material;    re-encrypting the decrypted program material according to a second encryption key;    encrypting the second encryption key and the metadata according to a third encryption key to produce a fourth encryption key; and    storing the re-encrypted program material in a media storage device.    
   
   
       35 . The method of  claim 34 , further comprising the steps of: 
 retrieving the stored re-encrypted program material; and    decrypting the retrieved re-encrypted program material.    
   
   
       36 . The method of  claim 35 , further comprising the step of storing the fourth encryption key.  
   
   
       37 . The method of  claim 36 , wherein the step of decrypting the retrieved re-encrypted program material comprises the steps of: 
 reading the stored fourth encryption key;    decrypting the fourth encryption key with the third key to produce the second encryption key and the metadata; and    decrypting the re-encrypted program material using the second encryption key according to a comparison between the decrypted metadata and other data.    
   
   
       38 . The method of  claim 37 , further comprising the steps of: 
 accepting a viewing request before reading the stored fourth encryption key; and    recording billing information regarding the program material.    
   
   
       39 . The method of  claim 34 , wherein the second encryption key is derived at least in part from the metadata.  
   
   
       40 . The method of  claim 34 , wherein the second encryption key is derived at least in part from a broadcast time of the program material.  
   
   
       41 . The method of  claim 34 , wherein the step of encrypting the second encryption key and the metadata according to a third encryption key to produce a fourth encryption key comprises the step of 
 modifying the second encryption key with the metadata; and    encrypting the modified second encryption key according to a third encryption key to produce a fourth encryption key.    
   
   
       42 . A receiver for storing program material for subsequent replay, comprising: 
 a tuner, for receiving a data stream comprising encrypted access control information, metadata having information describing replay rights for the program material, and the program material encrypted according to a first encryption key, the access control information including the first encryption key;    a conditional access module, communicatively coupleable to the tuner, for decrypting the encrypted access control information to produce the first encryption key;    a first decryption module, communicatively coupled to the tuner and communicatively coupleable to the conditional access module, for decrypting the program material using the first encryption key;    an encryption module, communicatively coupled to the first decryption module and communicatively coupleable to a media storage device, for re-encrypting the decrypted program material according to a second encryption key and for encrypting the second encryption key and the metadata according to a third encryption key to produce a fourth encryption key;    a second decryption module, communicatively coupleable to the media storage device, for decrypting the fourth encryption key to produce the second encryption key and the metadata using the third encryption key, and for decrypting the re-encrypted program material using the second encryption key according to a comparison between the decrypted metadata and other data.    
   
   
       43 . The receiver of  claim 42 , further comprising: 
 a media storage device, for storing and retrieving the re-encrypted program material and the fourth encryption key.    
   
   
       44 . The receiver of  claim 42 , further comprising: 
 a user I/O device for accepting a viewing request; and    a billing module, for accepting and storing billing information regarding the program material.    
   
   
       45 . The receiver of  claim 42 , wherein the second encryption key and the third encryption key are receiver-unique.  
   
   
       46 . The receiver of  claim 42 , wherein the encryption module encrypts the second encryption key and the metadata by modifying the second encryption key with the metadata and encrypting the modified second encryption key according to the third encryption key to produce the fourth encryption key.  
   
   
       47 . A method of storing program material for subsequent replay, comprising the steps of: 
 receiving a data stream comprising program material encrypted according to a first encryption key and metadata including information describing replay rights for the program material;    decrypting the program material;    re-encrypting the decrypted program material according to a second encryption key derived at least in part from the metadata;    encrypting the second encryption key according to a third encryption key to produce a fourth encryption key; and    storing the re-encrypted program material in a media storage device.    
   
   
       48 . The method of  claim 47 , further comprising the steps of: 
 retrieving the stored re-encrypted program material; and    decrypting the retrieved re-encrypted program material.    
   
   
       49 . The method of  claim 48 , further comprising the step of storing the fourth encryption key.  
   
   
       50 . The method of  claim 49 , wherein the step of decrypting the retrieved re-encrypted program material comprises the steps of: 
 reading the stored fourth encryption key;    decrypting the fourth encryption key with the third key to produce the second encryption key; and    decrypting the re-encrypted program material using the second encryption key.    
   
   
       51 . The method of  claim 50 , further comprising the steps of: 
 accepting a viewing request before reading the stored fourth encryption key; and    recording billing information regarding the program material.    
   
   
       52 . The method of  claim 47 , wherein the second encryption key is derived at least in part from a broadcast time of the program material.  
   
   
       53 . A receiver for storing program material for subsequent replay, comprising: 
 a tuner, for receiving a data stream comprising encrypted access control information, metadata having information describing replay rights for the program material, and the program material encrypted according to a first encryption key, the access control information including the first encryption key;    a conditional access module, communicatively coupleable to the tuner, for decrypting the encrypted access control information to produce the first encryption key;    a first decryption module, communicatively coupled to the tuner and communicatively coupleable to the conditional access module, for decrypting the program material using the first encryption key;    an encryption module, communicatively coupled to the first decryption module and communicatively coupleable to a media storage device, for re-encrypting the decrypted program material according to a second encryption key generated at least in part from the metadata and for encrypting the second encryption key according to a third encryption key to produce a fourth encryption key; and    a second decryption module, communicatively coupleable to the media storage device, for decrypting the fourth encryption key to produce the second encryption key using the third encryption key, and for decrypting the re-encrypted program material using the second encryption key.    
   
   
       54 . The receiver of  claim 53 , further comprising: 
 a media storage device, for storing and retrieving the re-encrypted program material and the fourth encryption key.    
   
   
       55 . The receiver of  claim 53 , further comprising: 
 a user I/O device for accepting a viewing request; and    a billing module, for accepting and storing billing information regarding the program material.    
   
   
       56 . The receiver of  claim 53 , wherein the second encryption key and the third encryption key are receiver-unique.