In one embodiment, a command is received from a video provider at a media rendering device, the command being a command to embed a subscriber ID in at least one video frame in a video stream. A random key, k is also received from the video provider at the media rendering device. An injective transformation is invoked for k and the subscriber ID, the injective transformation generating a sequence of pairs of: near-transparent patterns and corresponding time periods. Logical blocks of the at least one video frame in the video stream are overlaid with one of the near-transparent patterns for its one of the corresponding time periods. Related apparatus, systems, and methods are also described.

Apparatus and methods for provisioning of customer premise equipment (CPE) equipped with a secure microprocessor to receive e.g., digital video content by entering unique identification of the CPE at one or more servers located at the headend or other location of a content-based network. In one embodiment, the CPE comprises a download-enabled (e.g., DCAS) host with embedded cable modem and embedded set-top box functionality, and the provisioning includes enabling DOCSIS functionality of the CPE, assigning an IP address to the CPE and providing the CPE with a client image for the conditional access system chosen by the network operator. In one variant, the network operator can deactivate a provisioned device while connected to the network, as well when disconnected from the network. The network operator can also add, delete or replace conditional access client image in a provisioned device.

A system and method implements communications between a TV operator's infrastructure and set-top boxes (STBs) through a TV operator's infrastructure, wherein the infrastructure includes at least one Conditional Access System (CAS), a messaging engine and a Set Top Box (STB), the STB including a unique identification value. The method comprises receiving a structured message in the messaging engine; computing a stream out of multiple received structured messages by the messaging engine and sending to the multiplexor; including the stream of structured messages in a broadcasted signal transmitted through the TV operator's infrastructure; receiving the broadcasted signal by the STB and extracting a structured message; and comparing addressing information in the extracted structured message with a unique identification of the STB. Messages directed to the STB can be displayed.

Systems, methods, apparatuses, and computer-readable media for secure management of accounts on display devices using a contactless card. An application executing on a display device may receive a request specifying a service provider. The display device may receive a cryptogram generated a contactless card, and transmit the cryptogram to an authentication server. The authentication server may decrypt the cryptogram and generate a virtual account number associated with the contactless card. The authentication server may transmit the virtual account number to the service provider, which may create an account based at least in part on the virtual account number and the decryption of the cryptogram by the authentication server. The display may receive an authentication token generated by the service provider for the account, and access the account created by the service provider based at least in part on the authentication token.

A system and method implements communications between a TV operator's infrastructure and set-top boxes (STBs) through a TV operator's infrastructure, wherein the infrastructure includes at least one Conditional Access System (CAS), a messaging engine and a Set Top Box (STB), the STB including a unique identification value. The method comprises receiving a structured message in the messaging engine; computing a stream out of multiple received structured messages by the messaging engine and sending to the multiplexor; including the stream of structured messages in a broadcasted signal transmitted through the TV operator's infrastructure; receiving the broadcasted signal by the STB and extracting a structured message; and comparing addressing information in the extracted structured message with a unique identification of the STB. Messages directed to the STB can be displayed.

A server is operable to receive a media device identifying number (ID) and establish an association between a media device and a payment account and, in one embodiment, supports at least one of payment authorization and payment clearing based at least in part on the media device ID and the payment account. A network and system includes a payment card processor server that is operable to receive a payment authorization request and to determine if an authorized media device generated a purchase selection message and to determine to approve a received payment authorization request based, in part, if the media device was authorized for the purchase selection based upon a received media device ID.

A system for securely providing streaming media content on-demand may include a plurality of receiving devices in which each receiving device may request the same or different streaming media content (e.g., stored at a content storage system of a content delivery network) on-demand using VOD or other available on-demand services and/or applications associated with, in communication with or running on the respective receiving devices. In response, the content storage system of the content delivery network will encrypt the requested content uniquely for each received request (e.g., according to an encryption key that is unique for each or virtually each request) and deliver the encrypted requested content to the appropriate respective receiving device of the receiving devices. The respective receiving devices will then each decrypt the streaming content as it is being received according to the corresponding decryption key communicated from a respective individual secure remote to the respective receiving device.

A technique to manage members of a group of decoders having access to broadcast data, each group member sharing a common broadcast encryption scheme (BES) comprising the steps of, in a stage for a decoder to become a group member, receiving keys pertaining to the position in the group according to the BES, receiving a current group access data comprising a current group access key, and in a stage of accessing broadcast data, using the current group access data to access the broadcast data, and in a stage of renewing the current group access key, sending a first group message comprising at lease a next group access key encrypted so that only non-revoked decoders can access it, said group message being further encrypted by the current group access key, updating the current group access key with the next group access key.

A method and apparatus for creation, distribution, assembly and verification of media, including one embodiment, media is transmitted to a receiver where the receiver assembles the media into programming. In another embodiment, media is transmitted to the receiver from a plurality of sources. In a further embodiment, a source of media performs a tagging operation to associate sets of tags with elements of the stream of media. In various embodiments, different combinations of look-and-feel, content and other tags are associated with the media stream. In an additional embodiment, tagging of the media stream is performed at the receiver. A user at the receiver may also provide data about the user to the receiver. In yet another embodiment, the receiver uses the tags to assemble the media into a program. In still further embodiments of the invention, various Royalty Only Aggregate Revenues or “ROAR” models and apparatus are disclosed.

A receiver device having a processor, memories, descrambler and decoders modules configured to produce a sequence of elementary media content packets. The receiver device further comprises a marker unit configured to mark data in the sequence of elementary media content packets according to a pattern defined by an internal parameter associated to the receiving device. The marker unit is configured to determine, in the sequence of elementary media content packets at least one segment of a predetermined length and starting at a predetermined position in the sequence, to divide the segment into a predetermined number of contiguous windows including data of all or part of at least one elementary media content packet. Each window in the segment defined in the sequence of elementary media content packets is indexed by an index defining a position of a window in the segment. The marker unit codes the internal parameter by applying a mathematical transformation function, obtaining a resulting bits string, calculates position indices of a predetermined number of windows on the basis of all or a portion of the resulting bits string, said predetermined number of windows being lower than the number of windows in the segment, and modifies data in the windows designated by the calculated position indices. The windows including modified data and the windows including original data from within the segment of elementary media content packets a unique pattern representing the internal parameter associated to the receiving device.