`Wechselberger et al.
`
`[54] MULTI-LA YER ENCRYPTION SYSTEM FOR
`THE BROADCAST OF ENCRYPTED
`INFORMATION
`
`[75]
`
`.Inventors: Anthony J. Wechselberger, San
`Diego; Leo I. Bluestein, Rancho
`Bernardo; Leo Jedynak, San Diego;
`David A. Drake, Escondido; Larry
`W. Simpson, Poway, all of Calif.
`[73] Assignee: Oak Industries Inc., Rancho
`Bernardo, Calif.
`[21] Appl. No.: 401,258
`[22] Filed:
`
`Jul. 23, 1982
`Int. CI.J ............................................... H04K 1/02
`[51]
`[52] U.S. Cl. ................................. 178/22.08; 358/122;
`358/123
`[58] Field of Search .... 178/22.08, 22.09, 22.13-22.16;
`375/2.2; 455/26-28; 358/114, 122, 123
`
`[56]
`
`References Cited
`U.S. PATENT DOCUMENTS
`4,193,131 3/1980 Lennon et al. ................... 178/22.08
`4.203.166 5/1980 Ehrsam et al. ................... 178/22.09
`4,288,659 9/1981 Atalla ............................... 178/22.08
`4,292,650 9/1981 Hendrickson ....................... 358/114
`4,323,921 4/1982 Guillou ............................... 358/114
`4,337,483 6/1982 Guillou ............................... 358/114
`4,348,696 9/1982 Beier ................................... 358/114
`4.354,201 10/1982 Sechet et al. ....................... 358/114
`4,388,643 6/1983 Aminetzeh .......................... 358/114
`4,460,922 6/1984 Ensinger et al. .................... 358/114
`
`[l lJ Patent Number:
`[45] Date of Patent:
`
`4,531,020
`Jul. 23, 1985
`
`4,464,678 8/1984 Schiff et al. ......................... 358/122
`FOREIGN PATENT DOCUMENTS
`
`W081/02961 10/1981 PCT Int'! Appl. ................. 358/122
`W083/01881 5/1983 PCT Int'! Appl. ............... 358/122
`Primary Examiner-Salvatore Cangialosi
`Attorney, Agent, or Firm-Kinzer, Plyer, Dorn &
`McEachran
`[57]
`
`ABSTRACT
`A method of controlling the simultaneous broadcast of
`enciphered digital information signals, for example in a
`radio or television broadcast environment, to a plurality
`of subscribers provides several levels of enciphering
`keys. The broadcast digital information signal is in a
`broadcast common service enciphering key and com(cid:173)
`munication between the transmitter and subscribers
`may take place in a box key or in a group enciphering
`key common to a group of subscribers having a com(cid:173)
`mon interest in the reception of broadcast signals of a
`particular type. Each receiver will decipher the broad(cid:173)
`cast digital information in a specific service key which
`is common to that broadcast. The service key may be
`changed at one or more subscribers by communicating
`the change in the service key to the subscribers by
`means of the group enciphering key. Further, the group
`enciphering key may be changed at one or more sub(cid:173)
`scribers or new groups may be formed among subscrib(cid:173)
`ers by communicating to the subscribers in one or more
`group endphering keys.
`5 Claims, 3 Drawing Figures
`
`MllVP
`KE/IS
`
`TRIIIISM!TTER
`
`/8
`
`/4
`
`;'J/6/TIZE/J
`5ER//lt'E
`/MT//
`5t1VRt'E
`
`3'Z
`
`/6
`
`/Z
`
`t'lll!TROL
`tllillll/EL
`Pi/Ti/
`
`28
`
`Zo
`
`El(CRYl'TE,:7
`5ERWt'E
`Pi/Ti/
`
`APPLE EXHIBIT 1071
`APPLE v. PMC
`IPR2016-01520
`Page 1
`
`
`
`tJ.RIJIIP ..!/l '.s
`-
`NETJYtlRk'
`APP/DELETE/ REPLAeE I ~ROIIP /.P /1#0 IJRIJIIP ANJ)
`____________ .BOX KEY PATA BAS£
`I
`
`dRIJI/P
`IP '.5
`
`~RIJIIP
`KEJl.5
`
`22
`
`-f I q.J.
`
`TRAN.5111/TTER
`
`4&
`
`.18
`
`/()
`
`NETJV()RK
`ttJNTRIJL
`tlJIIIPI/TER
`
`tl115C. tllNTRtJL INFO.
`
`KEY
`dENERATIJ/l
`ZIJ
`
`/8
`
`CI/RRENT
`SERJI/CE
`KEY
`
`.!4
`
`3'Z
`
`f)/d/TIZEIJ
`5ERJll~E
`PATA
`5IJI/RtE
`
`/6
`
`~~ HRV/t£ ~
`/4-1~s,; fJ,4TA
`/2
`~ ENtRYPTIJR
`
`t'ONTR()L
`
`• tllANAIEL
`
`PATA
`
`'t()ll/8/AIER I
`
`..
`
`·.16
`
`J'IJ
`
`tlJNTRIJJ.
`~~ tllANNEL
`~~ ENtRfl/JTOR
`
`28
`
`kEfl PIJRT
`
`Z6
`
`Rtv,e-
`&RIJIIP KEY
`
`v-Z4
`
`ElltRY.PTEP
`-5ERWCE
`PATA
`
`~
`en .
`""C
`~ ('t) a
`
`~
`i::
`r"
`N
`
`_.w -'° 00
`
`UI
`
`Cl)
`t:r'
`
`(t) a -g,
`
`VJ
`
`.a;::..
`,..
`tit w
`,.. s 0
`
`lo.a
`
`APPLE EXHIBIT 1071
`APPLE v. PMC
`IPR2016-01520
`Page 2
`
`
`
`t'IJNTRIJL C/IAIIIIEL PATA
`~4
`
`48
`
`§'6
`
`,l/£W tRIJ//P IP
`
`RtVR-CRtJIJP fl)
`
`tllJIJ/A,1/f) TYPE
`1111/J Afl5t. f#FtJ.
`
`!'!
`£,1/(Rf PTE /J &Rl)IIP
`/JR JERV/tE l(EY5
`
`Rt/lR PATA
`PRIJCES50R
`
`41
`
`.f"IJ
`
`jl)
`
`PEt'RYPT!A/6- t:RIJIJP
`h... CONTROi.
`;1 ,,, a
`'Eu
`_ ~~ CIIANNEL
`/t&T RWv o'/JX K, r
`64 ~ ~ PEtRYPTtJR
`1
`&-ROI/P ~EJ/5
`:t:Rv'IIP KEY.S
`tR()IJP /P's
`,
`APP/PELETE/REPLAt'E ~RIIIIP /P'S :A#P BIJX KE'/ APP/PELETE/REPLlltE •
`I JERV/t'E ~68
`I KEYS
`I
`'
`1/J
`
`/ / /_/
`
`,
`
`1--IZ
`
`.f'Z/
`
`A1EA1v'RY TABLE
`
`E#t'RYPTEP
`5ERJ/ICE
`PArA
`
`I CJ• 2.
`-f-
`RECE/JIER
`
`~~ 5ER/lltE
`~~ PATA
`4Z ~ ~ PEtRYPTOR
`44
`
`PEtRYPTEP
`5ERJlltE
`PATA
`
`~
`
`~
`Cl.) .
`~ ('t) a
`~ s:: =--
`"' -\0
`N w
`
`00
`LIi
`
`Vl
`::::r'
`("I)
`~
`N
`~
`w
`
`.,I::.
`,...
`
`tJJ w ......
`,... s 0
`
`APPLE EXHIBIT 1071
`APPLE v. PMC
`IPR2016-01520
`Page 3
`
`
`
`U.S. Patent
`
`Jul. 23, 1985
`
`Sheet 3 of3
`
`4,531,020
`
`t'(}J/AfANP Rt'VR-~R()IIP NEW' &R()t/P NEW d-RfJtlP
`KEY
`TYPE
`ff)
`ff)
`
`Hl5C.
`l#FtJ.
`
`f()Jll,,fANP li't'JIR-tRIJI/P IIEW 5ERJ//t'E
`TYPE
`fl)
`l<Efl
`
`Hl5C.
`/;VFO.
`
`I 9.3.
`-f-
`TflPJtAL HE55,4dE 5TRtltTt/RE
`
`APPLE EXHIBIT 1071
`APPLE v. PMC
`IPR2016-01520
`Page 4
`
`
`
`1
`
`4,531,020
`
`MULTI-LAYER ENCRYPTION SYSTEM FOR THE
`BROADCAST OF ENCRYPTED INFORMATION
`
`SUMMARY OF THE INVENTION
`The present invention relates to a system for enci(cid:173)
`phering and deciphering digital information signals and
`has application in the field of broadcast television, al(cid:173)
`though the principles disclosed herein should not be so 10
`limited. Specifically, audio information and/or text
`information for display on a video screen may be placed
`in digital form and enciphered. Such signals may be part
`of a cable television system (CATV), a subscription
`television system (STV) or a direct broadcast satellite 15
`television system (DBS).
`A primary purpose of the invention is a system for
`enciphering digital information signals in the environ(cid:173)
`ment described in which there are multiple layers of
`enciphering keys to insure security of the broadcast 20
`information.
`Another purpose is an enciphering and deciphering
`system of the type described in which communication
`between the broadcast station and a plurality of sub(cid:173)
`scribers may take place in a box key peculiar to an 25
`individual subscriber, a group key peculiar to a group of
`subscribers having a common interest, or in a service
`key which is common for a specific broadcast and
`which may be changed from time to time through either
`the group or box keys.
`Another purpose is a simply reliable and completely
`secure enciphering and deciphering system for use in
`the broadcast of digital information signals.
`Another purpose is a method for controlling the
`broadcast of digital information signals in which there 35
`are layers or levels or tiers of keys to insure system
`security and in which the keys may be changed by
`communication to subscribers in one or more of the
`layers of keys.
`Other purposes will appear in the ensuing specifica(cid:173)
`tion, drawings and claims.
`
`30
`
`40
`
`BRIEF DESCRIPTION OF THE DRAWINGS
`The invention is illustrated diagrammatically in the 45
`following drawings wherein:
`FIG. 1 is a block diagram of a transmitter for use in
`the control system described herein,
`FIG. 2 is a block diagram of the receiver, and
`FIG. 3 is a diagrammatic illustration of typical mes- 50
`sage structures used in the system disclosed herein.
`
`DESCRIPTION OF THE PREFERRED
`EMBODIMENT
`The present invention has utility in CATV, STV and
`DBS television systems in which the video signal is
`coded. The specific enciphering and deciphering sys(cid:173)
`tem disclosed herein is primarily applicable to the audio
`portion of the video signal as the audio signal is readily
`susceptible of being placed in a digital format. It is also 60
`applicable to those video signals in which alphanumeric
`text information is transmitted, such as the VIDEO(cid:173)
`TEXT system now in commercial use by Oak Industries
`Inc., assignee of the present application or other types
`of digital or digitized data such as computer software,
`games, radio programs, computer data bases, etc. which
`may be delivered via such communication system. Sig(cid:173)
`nals of that type are also readily susceptible to being
`
`2
`placed in digital form and hence can be enciphered and
`deciphered by the control system described herein.
`It is important in broadcast systems of the type re(cid:173)
`ferred to above to insure secrecy or privacy of the com-
`5 munications, as customarily such broadcasts are on a·
`subscription basis and it is mandatory that privacy be
`retained or the concept of a subscription broadcast
`system is destroyed. To that end various schemes have
`been proposed to insure the security of those portions of
`the signals which can be placed in digital form. The
`present invention provides a first level of security by
`enciphering the digital information signals in what is
`termed a service key, which key is provided to all sub(cid:173)
`scribers who are to receive a specific broadcast or a
`specific type of broadcast. For example, the service key
`may be peculiar to a specific program, but more com-
`monly it will be used for a specific channel when the
`system is used in a television environment. To insure
`privacy and security the service key must be periodi(cid:173)
`cally changed. To change the service key it is necessary
`to communicate with each of the subscribers and this
`communication takes place in what is called the group
`key which is common to a group of subscribers, all of
`whom are to receive a specific type of broadcast. There
`may be a substantial number of groups associated with a
`specific communication system and an individual sub-
`scriber may itself belong to more than one or a plurality
`of groups. Specifically, to change the service key for a
`particular type of broadcast, the broadcaster will com(cid:173)
`municate to all of the subscribers in the group key and
`the group key is used to change the service key. As an
`alternative, a large number of service keys may be
`stored in each decoder and the broadcast station selects
`a specific service key by communicating with the sub(cid:173)
`scriber in the group key.
`From time to time subscribers' tastes and desires in
`programming change and thus it is necessary to change
`groups, to reform groups and to add or delete subscrib(cid:173)
`ers from a particular group. Again, this may be accom(cid:173)
`plished by communicating to the subscribers in the
`group key. The group key itself may be changed and
`subscribers may be added or deleted from the group, or
`in fact new groups may be formed by communicating to
`the subscribers in the group key.
`In addition to communicating in the group key, it is
`necessary to have addresses which are peculiar to an
`individual subscriber and peculiar to a group. For exam(cid:173)
`ple, each subscriber may have its own individual ad(cid:173)
`dress which is peculiar to that subscriber. That address
`will be stored in the subscriber's decoder. In addition,
`the subscriber may belong to one or more groups, each
`of which will have a specific address for that group
`with these addresses being temporarily stored in the
`subscribers decoder. Thus, the broadcaster may com-
`55 municate to the subscriber by providing the subscriber's
`group address or the subscriber's individual address and
`by communicating to the subscriber in the group key
`peculiar to the group with which the broadcaster is
`specifically concerned at that moment.
`As a final means for insuring security and privacy,
`each subscriber will have what is known as a box key
`and that is a key peculiar to a specific subscriber. If the
`broadcaster wishes to communicate in complete pri(cid:173)
`vacy with an individual subscriber, it may do so in the
`65 subscriber's box key. For example, if the broadcaster
`feels that one or more groups of keys have been com(cid:173)
`promised and the only way to reform groups is to com(cid:173)
`municate to each individual subscriber in its box key,
`
`APPLE EXHIBIT 1071
`APPLE v. PMC
`IPR2016-01520
`Page 5
`
`
`
`4,531,020
`
`3
`the broadcaster may do so, although this may be a time
`consuming operation taking several hours. In any event,
`by having a hard-wired box key available in each sub(cid:173)
`scriber's box, the broadcaster may communicate to each
`individual subscriber in that specific key to provide 5
`changes in group keys or formation of new groups, etc.
`In the general sense, there need not be a logical distinc(cid:173)
`tion between group keys and box keys, or group ad(cid:173)
`dresses and box addresses. The box address/box key
`pair simply constitutes another subscriber subset 10
`(group) to which there happens to be only a single
`member.
`There are normally two channels of communication
`between the broadcaster and the subscribers. The ser(cid:173)
`vice channel provides the digital information signals 15
`and these are enciphered in the service key. The other
`channel is the control channel necessary to change
`service keys, change or reform group keys, etc., and this
`channel may be independent of the channel carrying the
`digital information signals, or it may be inserted into 20
`gaps in the service channel. For example, in a television
`environment the service channel may be at aural carrier
`frequencies and the control channel may be on an alter(cid:173)
`nate FM frequency. Another system provides that the
`control channel is inserted as data in the vertical or 25
`horizontal blanking intervals of the accompanying
`video signal.
`In FIG. 1 the network control computer is indicated
`at 10 and will normally be programmed to handle all of 30
`the functions of the overall control system as described.
`A service data encryptor 12 receives digitized service
`data at its data port 14. This may be digitized audio or
`text information as described above. The current ser(cid:173)
`vice key is provided at key port 16 from a current ser- 35
`vice key source 18. A key generator 20 will provide a
`constant supply of enciphering keys. Key generator 20
`provides keys to the service key source 18 and also to a
`network group identification and group and box key
`data base 22. Computer 10 also provides an input to data 40
`base 22 so that group identifications may be added or
`changed or replaced.
`One output from data base 22 goes to a receiver
`group key source 24 which provides the input for key
`port 26 of control channel encryptor 28. Data port 30 of 45
`encryptor 28 receives its input from a selector 32 which
`in turn receives one input from service key source 18
`and a second input from a new group key source 34.
`Thus, the selector provides either a change in service
`key or a change in group key to the data port of the so
`control channel encryptor, which data will be encoded
`in the then current group key for transmission to com(cid:173)
`biner 36. Combiner 36 will be connected to a modulator
`which will provide a modulated signal appropriate for
`the particular communication medium, e.g., CA TV, 55
`STV or DBS.
`An additional input to combiner 36 comes directly
`from network control computer 10 and will provide
`miscellaneous control information such as error correc(cid:173)
`tion, etc.
`In addition to the encrypted key information which is
`a part of a control message, each message includes iden(cid:173)
`tification numbers or addresses peculiar to a subscriber
`or to a group. This information is provided by data base
`22 to combiner 36 through a new group identification
`38 which is utilized when a group ID is to be changed
`or through a receiver group identification 40 which is
`utilized when a particular group is to be addressed.
`
`4
`FIG. 3 illustrates typical control messages which may
`be sent by combiner 36 as the control channel data. In
`the upper message there will be, as the first field of a
`message various command and control signals peculiar
`to the protocol of the specific system. The next field of
`the message is the receiver group identification or ad-
`dress of all of the subscriber boxes in a particular group
`which are to receive the message. This is necessary to
`inform the subscriber boxes that a message is on the
`way. Assuming that a new group key is to be provided,
`that will be the next field of the message and that infor-
`mation will be encrypted in the current group key. If a
`new group identification or address is to be provided
`because the group is being changed or reformed in some
`manner, then that information will also be provided,
`however, it need not be in encrypted form. Finally, the
`message will conclude with such miscellaneous com(cid:173)
`mand information as error correction, etc.
`A second type of message structure is indicated in the
`lower portion of FIG. 3 and in this case differs from the
`top message in that a new service key is provided to all
`of the members of the group. This specific service key
`is encrypted in the then current group key.
`A typical receiver is illustrated in FIG. 2. The en(cid:173)
`crypted service data is provided on the service channel
`and provides an input for data port 42 of service data
`decryptor 44. The output will be the decrypted service
`data.
`The control channel data is directed to a receiver
`data processor 46 in which the receiver group identifi(cid:173)
`cation field, routed through a selection circuit 48, will
`pass through the processor and be compared in a com(cid:173)
`parison circuit 50 with the group identification stored in
`a memory table or memory storage means 52. Assuming
`that the particular subscriber is to receive the message
`on the control channel, data processor 46 will be en(cid:173)
`abled which in turn will cause the memory table to
`provide the required key information to the decryptors.
`If a new group identification is to be provided, re(cid:173)
`ceiver data processor 46 will pass this information,
`which is separated by a new group ID selection circuit
`54, directly to the group identification portion of the
`memory table so that the group ID may be changed in
`the required manner.
`The command information is passed directly through
`a separating circuit 56 to the receiver data processor, to
`perform a portion of the enabling function to permit the
`processor to handle the group identification address or
`a change in group identification address, as required in
`accordance with a specific message. Thus, the group
`identification which may be peculiar to a single sub(cid:173)
`scriber or peculiar to one of the groups to which the
`subscriber belongs, is stored in memory table 52 and
`may be changed periodically as the tastes and require(cid:173)
`ments of a specific subscriber change.
`The encrypted key portion of a control channel mes(cid:173)
`sage is separated by encrypted group or service key
`detector 58 and is sent directly to data port 60 of control
`60 channel decryptor 62. The key port of decryptor 62,
`indicated at 64, is connected to the group and box key
`portion of the memory table. Thus, when enabled by
`data processor 46, the required key will be drawn from
`the memory and provided at the key port of control
`65 channel decryptor 62. In this connection, the memory
`table may be a non-volatile storage area for the collec(cid:173)
`tion of the group identifications and the group keys
`resident within the box. The permanent box key for a
`
`APPLE EXHIBIT 1071
`APPLE v. PMC
`IPR2016-01520
`Page 6
`
`
`
`4,531,020
`
`5
`specific subscriber box is permanently stored in the
`memory table and is not subject to revision or change.
`The output from control channel decryptor 62 which
`may be a change in service key or a change in group key
`is connected to the memory table and to the service key 5
`source 68 with the output from the service key source
`being connected to key port 70 of service data decryp(cid:173)
`tor 44. Accordingly, a change in service key is provided
`to the service data encryptor to decrypt the information
`bearing signals from the broadcast station. A change in IO
`group key is communicated to the memory table so that
`the group key information may be added to or deleted
`or changed as requirements dictate.
`In a typical broadcast situation, and assuming audio
`signals as a portion of a subscription television broad- 15
`cast are the information signals in question, such audio
`signals will be digitized and encrypted in a specific
`service key and broadcast on the particular medium
`whether it be a CATV, STV or DBS system. The ser(cid:173)
`vice key will be available at each subscriber eligible to 20
`receive that broadcast and may be periodically changed
`as the broadcaster deems necessary to maintain system
`security. Whenever there is to be a change in the service
`key, this information is provided through the control
`channel to all subscribers who are to receive that broad- 25
`cast. The change in service key is encrypted in the
`group key peculiar to the group which is to receive the
`specific broadcast. For example, there may be a group
`composed of those interested in adult movies, those
`interested in opera, those interested in specific types of 30
`sports programs. The group may be formed of those in
`a specific geographical area. The number and types of
`groups are almost infinite and normally each subscriber
`will be able to belong to a plurality of groups and will
`have a group key and group ID associated with each 35
`such group.
`If a specific subscriber desires to belong to a new
`group, that fact is communicated to the broadcast sta(cid:173)
`tion and if only a single subscriber is to join the group,
`the broadcaster may communicate the group ID and 40
`group key to that subscriber through the subscriber's
`individual box key. On the other hand, if a substantial
`portion of a current group is to be involved in a new
`group, the broadcaster may address those subscribers to
`form the new group in the current group key but with 45
`the message being preceded by the individual IDs of
`those particular subscribers. Thus, the broadcaster may
`form new groups, delete subscribers from a particular
`group, etc., all by communicating to the subscribers
`within the concept of the group identification and the 50
`group key. Group keys may be changed without a
`change in the subscribers as from time to time the
`broadcaster may consider that it is possible that the
`group key has been compromised.
`At times it may be necessary for the broadcaster to 55
`communicate individually with all subscribers in the
`system. Perhaps the broadcaster considers that in some
`manner the group key concept has been compromised
`and it is necessary to completely change the group keys
`throughout the system. In that instance the broadcaster 60
`would communicate to each subscriber utilizing the
`subscriber's individual box key. This would be a time
`consuming process, for example several hours, and
`would normally be done in the nighttime hours when
`there are few if any subscribers watching television 65
`programming.
`The present system provides great flexibility for the
`broadcast station. Boxes which are stolen or in the
`
`6
`houses of non paying subscribers may be electronically
`detected or rendered ineffective. Subscribers may select
`different types of programming. The system is secure in
`that there are layers or tiers of keys available to the
`broadcaster for enciphering information and communi:
`eating with subscribers.
`Although the service data encryptor and control
`channel encryptor have been described as physically
`separate, it will be understood by those skilled in the art,
`that these circuits may be physically the same, but func(cid:173)
`tionally responsive to different instructions to perform
`both service and control encrypting functions. The
`same applies to the receiver decryptors.
`Whereas the preferred form of the invention has been
`shown and described herein, it should be realized that
`there may be many modifications, substitutions and
`alterations thereto.
`The embodiments of the invention in which an exclu(cid:173)
`sive property or privilege is claimed are as follows:
`1. A method of controlling the simultaneous broad(cid:173)
`cast of enciphered digital information signals to a plu(cid:173)
`rality of subscribers in which each subscriber has a
`permanent box enciphering key; in which the broadcast
`digital information signal is in a service enciphering key;
`and in which communication to subscribers may take
`place in a group enciphering key common to a group of
`subscribers having a common interest in the reception
`of broadcast signals of a particular type, including the
`steps of:
`(a) simultaneously broadcasting digital information sig(cid:173)
`nals in a specific service key, which digital informa(cid:173)
`tion signals are deciphered by subscribers having the
`service key,
`(b) changing the service key at subscribers by simulta(cid:173)
`neously communicating the change in service key to
`subscribers in at least a portion of a group, such com(cid:173)
`munication being in the group enciphering key,
`(c) changing the group enciphering key in at least a
`portion of the subscribers in a group by communicat(cid:173)
`ing such change in the group enciphering key to the
`selected subscribers in the group, with each commu(cid:173)
`nication to a subscriber in the group being preceded
`by an address to designated subscribers in the group.
`2. The method of claim 1 further characterized by
`and including changing the group key and/or forming a
`new group of subscribers by communicating to each
`subscriber, individually and sequentially, a new group
`key, with such communication to each subscriber being
`in the subscriber's box key.
`3. The method of claim 1 further characterized by
`and including changing the group key and/or forming a
`new group of subscribers by communicating to each
`group of subscribers, in whole or in part, a new group
`key, with such communication being in group encipher(cid:173)
`ing keys.
`4. A receiver for deciphering broadcast digital infor(cid:173)
`mation signals enciphered in a broadcast common ser(cid:173)
`vice enciphering key including:
`(a) a service data decryptor using a broadcast common
`service deciphering key to decipher broadcast digital
`information signals,
`(b) memory storage means for retaining an individual
`subscriber box deciphering key, at least one change(cid:173)
`able group deciphering key, and one or more ad(cid:173)
`dresses specific to a subscriber and its specified group
`or groups,
`(c) and a control channel decryptor having a control
`channel input and being connected to said memory
`
`APPLE EXHIBIT 1071
`APPLE v. PMC
`IPR2016-01520
`Page 7
`
`
`
`4,531,020
`
`8
`sage as to a change in the service deciphering key or
`a change in or formation of a group deciphering key.
`5. The receiver of claim 4 further characterized by
`and including a receiver data processor connected to
`said memory storage means for adding and/or deleting
`and/or replacing addresses in said memory storage
`means.
`
`* * * * *
`
`7
`storage and service data decryptor, comparison
`
`means for determining if a control channel message is
`
`addressed to a specific subscriber, said control chan- 5
`
`nel decryptor using the box deciperhing key or a
`
`group of deciphering key to decipher a control mes-
`
`10
`
`15
`
`20
`
`25
`
`30
`
`35
`
`40
`
`45
`
`50
`
`55
`
`60
`
`65
`
`APPLE EXHIBIT 1071
`APPLE v. PMC
`IPR2016-01520
`Page 8
`
`