Apparatus and methods for provisioning of customer premise equipment (CPE) equipped with a secure microprocessor to receive e.g., digital video content by entering unique identification of the CPE at one or more servers located at the headend or other location of a content-based network. In one embodiment, the CPE comprises a download-enabled (e.g., DCAS) host with embedded cable modem and embedded set-top box functionality, and the provisioning includes enabling DOCSIS functionality of the CPE, assigning an IP address to the CPE and providing the CPE with a client image for the conditional access system chosen by the network operator. In one variant, the network operator can deactivate a provisioned device while connected to the network, as well when disconnected from the network. The network operator can also add, delete or replace conditional access client image in a provisioned device.

Apparatus and methods for provisioning of customer premise equipment (CPE) equipped with a secure microprocessor to receive e.g., digital video content by entering unique identification of the CPE at one or more servers located at the headend or other location of a content-based network. In one embodiment, the CPE comprises a download-enabled (e.g., DCAS) host with embedded cable modem and embedded set-top box functionality, and the provisioning includes enabling DOCSIS functionality of the CPE, assigning an IP address to the CPE and providing the CPE with a client image for the conditional access system chosen by the network operator. In one variant, the network operator can deactivate a provisioned device while connected to the network, as well when disconnected from the network. The network operator can also add, delete or replace conditional access client image in a provisioned device.

A method is disclosed for providing secure access to multimedia content to a user of a content service at a first user device configured to enable the user to consume the multimedia content. The method comprises: providing, from a second user device, a user identifier to a service provider of the content service, the second user device being provided with a subscriber identity module enabling the second user device to connect to a cellular communication network, the user identifier comprising an identifier of the subscriber identity module; at the second user device, receiving an access key from the service provider, through the cellular communication network, the access key being associated with the user identifier; providing the access key from the second user device to the first user device through a short-range connection, and at the first user device, using the access key to access the multimedia content.

A decoding device includes a communication interface and a processor operably coupled to the communication interface. The communication interface receives at least a portion of a broadcast stream including media data, which includes media samples. The processor identifies information elements containing DRM processing information in the broadcast stream. Each information element is associated with a respective one media sample of the media data. For each information element, the processor also identifies the one media sample that is associated with the information element. The processor further identifies, based on the information element, the DRM processing information for the one media sample. In addition, the processor decodes the one media sample based on the DRM processing information.

A decoding device includes a communication interface and a processor operably coupled to the communication interface. The communication interface receives at least a portion of a broadcast stream including media data, which includes media samples. The processor identifies information elements containing DRM processing information in the broadcast stream. Each information element is associated with a respective one media sample of the media data. For each information element, the processor also identifies the one media sample that is associated with the information element. The processor further identifies, based on the information element, the DRM processing information for the one media sample. In addition, the processor decodes the one media sample based on the DRM processing information.

The present invention provides methods, apparatuses, and systems for delivering protected streaming content to a receiving device. In an aspect of the present invention, a broadcaster provides streaming content. To ensure viewers are properly authorized, the streaming content is encrypted with a traffic key. The traffic key is provided to the users via a key stream message, which is encrypted with a service key. The user obtains at least one rights object from a rights issuers and the at least one rights object includes the service key so that the streaming content may be used. The at least one rights object also contains information regarding usage rights that may be configured by the rights issuer so that, depending on the user and/or the receiving device, different rights may be available. The key stream message may include a program category variable value that indicates the type of content and in conjunction with the rights object, determines what usage rights exist for the streaming content.

The present invention provides methods, apparatuses, and systems for delivering protected streaming content to a receiving device. In an aspect of the present invention, a broadcaster provides streaming content. To ensure viewers are properly authorized, the streaming content is encrypted with a traffic key. The traffic key is provided to the users via a key stream message, which is encrypted with a service key. The user obtains at least one rights object from a rights issuers and the at least one rights object includes the service key so that the streaming content may be used. The at least one rights object also contains information regarding usage rights that may be configured by the rights issuer so that, depending on the user and/or the receiving device, different rights may be available. The key stream message may include a program category variable value that indicates the type of content and in conjunction with the rights object, determines what usage rights exist for the streaming content.

A portable information terminal includes a controller configured to control a communication interface to transmit a charging permission response to a broadcast receiving apparatus in response to a charging permission request data transmitted when a broadcasting program that a user of the broadcast receiving apparatus desires to view contains an asset that requires charging. The charging permission response is allowed to be transmitted when positional information indicates that the portable information terminal is positioned inside of a predetermined positional range and apparatus identification information in the charging permission request data, by which the broadcast receiving apparatus is allowed to be identified, coincides with apparatus identification information stored in a memory. The controller controls the communication interface to transmit a charging denial response to the broadcast receiving apparatus when the positional information indicates that the portable information terminal is positioned outside of the predetermined positional range.

A portable information terminal includes a controller configured to control a communication interface to transmit a charging permission response to a broadcast receiving apparatus in response to a charging permission request data transmitted when a broadcasting program that a user of the broadcast receiving apparatus desires to view contains an asset that requires charging. The charging permission response is allowed to be transmitted when positional information indicates that the portable information terminal is positioned inside of a predetermined positional range and apparatus identification information in the charging permission request data, by which the broadcast receiving apparatus is allowed to be identified, coincides with apparatus identification information stored in a memory. The controller controls the communication interface to transmit a charging denial response to the broadcast receiving apparatus when the positional information indicates that the portable information terminal is positioned outside of the predetermined positional range.

A method of managing entitlements to program content of a content delivery system is disclosed comprising receiving a request, from a user, by a processing device, to subscribe to a video package or to purchase a video program from the content delivery system. The user has at least one user device configured for watching the program content. At least one entitlement resulting from the subscription or purchase is calculated and connection information for each of the plurality of user devices is retrieved from database. The at least one calculated entitlement is pushed to each user device by the processing device, via a network, using the connection information. A system configured to implement the method and a video streaming device, such as a set-top box and a smart device, for example, are also disclosed. The smart device may be a smart phone or tablet, for example.