Provided is a method for protecting an encrypted control word. The method includes: receiving a hardware security module entitlement management message and an encrypted control word transmitted from a main chip, where the hardware security module entitlement management message includes a key for decrypting the encrypted control word; decrypting, based on the hardware security module entitlement management message and a hardware security module root key stored in the hardware security module, the encrypted control word to obtain a control word; reencrypting the control word based on a re-encryption key stored in the hardware security module to obtain a reencrypted control word; and transmitting the reencrypted control word to the main chip, so that the main chip decrypts, based on a main chip entitlement management message transmitted from the front end, the reencrypted control word to obtain the control word.

A method for executing a user application is disclosed. The method is implemented within a communications terminal of the type having a trusted environment. The trusted environment has a secured storage space and a secured applications execution module. The method has: a step of reception, within the trusted environment, of an instruction for launching a user application; a step of transmission, to a server, of a request for executing said user application; a step of reception, from the server, by a video-rendering application that is executed within the trusted environment, of a video stream resulting from the execution, on the server, of said user application; and a step for displaying said video stream on a screen of said communications terminal accessible from said trusted environment.

Described herein are systems and methods for securing transmission of content from a smart card in a host television receiver to a client television receiver. The smart card can receive the encrypted content stream from the television service provider, decrypt the content stream with the global network key, identify the client television receiver as the destination of the content stream, generate a unique key specific to the content stream, encrypt the unique key with a local key known to the client television receiver, encrypt the content stream with the unique key, and transmit the encrypted content stream along with the encrypted unique key to the client television receiver. The client television receiver can then receive the encrypted content stream and the encrypted unique key, decrypt the unique key, decrypt the content stream with the unique key, and transmit the content stream to a display device of the client television receiver.

A set-top box for changing channels and method for use of the same are disclosed. In one embodiment, the set-top box includes a network interface controller that is configured to receive a source internet protocol television signal, which includes two channels, from an external source and at least partially prepare the source internet protocol signal in order to forward the tuned signal to a television. The set-top box saves in a buffer the at least partially prepared second channel beginning at a recent periodic, sequential signal access point. In response to receiving a channel change instruction when the set-top box is forwarding the at least partially prepared first channel signal, the set-top box causes the television tuner to forward the at least partially prepared signal based on the second channel stored in the buffer beginning at the recent periodic, sequential signal access point.

A video stream protection device is for protecting a video stream to be decoded. The video stream contains one or more data units each having a header section and a body section, and the header section contains header information indicative of a data type of the corresponding body section. The video stream protection device comprises: an identification module for identifying the one or more data units based on respective start positions of the one or more data units; a data type detection module for obtaining the header information of the identified data units, and determining the data type of the body section of each identified data unit based on the header information of the identified data unit; and a control module for determining whether to prohibit decoding of data of each data unit based on the data type of the body section of the data unit.

A set-top box for changing channels and method for use of the same are disclosed. In one embodiment, the set-top box includes a network interface controller that is configured to receive a source internet protocol television signal, which includes two channels, from an external source and at least partially prepare the source internet protocol signal in order to forward the tuned signal to a television. The set-top box saves in a buffer the at least partially prepared second channel beginning at a recent periodic, sequential signal access point. In response to receiving a channel change instruction when the set-top box is forwarding the at least partially prepared first channel signal, the set-top box causes the television tuner to forward the at least partially prepared signal based on the second channel stored in the buffer beginning at the recent periodic, sequential signal access point.

A terminal device includes an application layer, an operating system layer, a hardware driver layer, and a hardware layer. The operating system layer includes a hardware abstraction layer, and the hardware layer includes a master chip and a television receiver chip. The hardware abstraction layer is disposed between the hardware driver layer and the player application at the application layer, so that the hardware abstraction layer shields the player application from an interface difference of television receiver chips, and provides a unified interface protocol between the player application and the television receiver chip, to be compatible with and support television receiver chips with different interfaces.

A set-top box for changing channels and method for use of the same are disclosed. In one embodiment, the set-top box includes a network interface controller that is configured to receive a source internet protocol television signal, which includes two channels, from an external source and at least partially prepare the source internet protocol signal in order to forward the tuned signal to a television. The set-top box saves in a buffer the at least partially prepared second channel beginning at a recent periodic, sequential signal access point. In response to receiving a channel change instruction when the set-top box is forwarding the at least partially prepared first channel signal, the set-top box causes the television tuner to forward the at least partially prepared signal based on the second channel stored in the buffer beginning at the recent periodic, sequential signal access point.

A display apparatus with a processor is configured to: store data of a first operating system (OS), a second OS and a third OS in a first area, a second area and a third area of a memory, respectively, and restrict access of the first OS to the data stored in the second area and access of the first OS and the second OS to the data stored in the third area; receive content from an external apparatus based on execution of the first OS, and receive authentication information of the content from the external apparatus based on execution of the second OS; and authenticate the content based on the received authentication information based on execution of the third OS, and control the content to be processed.

A method in a pattern encryption protection scheme may efficiently decrypt data blocks in a timely manner. In the method, a processor may receive a frame of data blocks. The frame may include a plurality of pattern-encrypted subsamples, and each pattern-encrypted subsample may include one or more encrypted data blocks and one or more unencrypted data blocks in accordance with a predetermined pattern. The processor may determine a first buffer portion and a second buffer portion based on a number of the data blocks in the frame and the predetermined pattern. The processor may sort the data blocks by copying the encrypted data blocks into the first buffer portion and by copying the unencrypted data blocks into the second data buffer portion. The processor may perform a decryption call to a crypto engine to generate corresponding decrypted data blocks using the sorted encrypted data blocks in the first buffer portion.