Title of Invention

METHOD FOR INDUCING THE PHYSICAL REPLACEMENT OF A SECURITY MODULE OF A PREVIOUS GENERATION FOR THAT OF A NEW GENERATION IN A USER UNIT

Abstract

A method for inducing the physical replacement of a security module (3) of a previous generation for that of a new generation in a user unit (2) connected to said security module (3) comprising the steps of: receiving a replacement prompt command including the minimal characteristics of the new generation of security module (3) from the control center (1); comparing the characteristics of the security module (3) being used with the received minimal characteristics; prompting the user to replace physically the security module (3) according to the results of the comparison.

Full Text

FORM 2 THE PATENTS ACT 1970 [39 OF 1970] THE PATENTS RULES, 2003 COMPLETE SPECIFICATION [See Section 10; rule 13] "METHOD FOR INDUCING THE PHYSICAL REPLACEMENT OF A SECURITY MODULE OF A PREVIOUS GENERATION FOR THAT OF A NEW GENERATION IN A USER UNIT" NAGRACARD S.A., of 22, Route de Geneve, CH-1033 Cheseaux-sur-Lausanne, Switzerland 466/MUM/2003 The following specification, particularly describes the invention and the manner in which it is to be performed: 5 JUN 2006 METHOD TO PROMPT THE UPDATING OF AN EVOLUTIONARY PRODUCT The present invention concerns a method for the updating of an evolutionary product, particularly in the field of smart cards. All the operators that use electronic and computer systems are faced with the updating of their products and the management of compatibility between the different versions. This matter is very important as the number of these products is very big and they are distributed on a large scale. As these products are linked, even sporadically, to a management centre, the first approach of the operators has been to make this software modifiable by downloading. This technique has been possible thanks to the EEPROM or Flash memories that accept reprogramming and that do not need permanent powering. In this way, when new functions appear, the downloading of the new software in these products allows the users to benefit from these functions without having to return their products to any technical centre. In a one-way configuration, that is, a configuration in which only the link between the operator and the user is possible, it is difficult, even impossible, to determine if all the users have received the updating. Thus, the operators are forced to assume the compatibility with several versions in parallel so that the users that have not received the updating can benefit from the proposed service. This example can even be intensified when changing the generation of the product, that is, that a physical replacement of the product is necessary. For this purpose the operators send the users the new generation of the product with the invitation of using this new product in the place of the previous one. When it is an operator that proposes a payment service it is very difficult to impose the use of the new product suppressing all compatibility with the old product. This would provoke dissatisfaction in the clients who feel little interest in considerations of a technical nature. This is why the operators are at present constrained, out of fear of letting down their clients, to ensure not only the compatibility between the software versions, but also between the material generations. This compatibility is costly in pass-band terms when communicating with the products as the commands must be sent according to all the criteria of the different versions. The objective of the present invention is a method that prompts the user to update his/her product when it is possible, and not when the centre ceases to support the version used by the user causing the stopping of the service. This objective is achieved by a method consisting in determining the current version of the user's product and in comparing this version with the minimal intended version, and if the user's version is a previous one to the minimal version, producing a temporary visual prompt in the user's terminal. According to one embodiment, the product is a smart card that controls the access to a pay television. This card allows supplying the necessary information to decode the numerical flux and to manage the subscriptions to the different services offered by the operator. This card is connected to a pay television decoder that sends the decoded signals to a screen. The process intended to convince the user to change his/her card is started by the management centre that sends, by the classical communication means, a prompt inviting to update the subscriber's decoders. Thus, according to the invention, the service given to the user is not interrupted but momentarily interfered in order to prompt the user to change his/her card for a more recent version. According to a first embodiment, this interference or warning indication is carried out by adding a message on the screen during a short time in order to remind the user to change his/her card. This apparition can be done on command of the card itself and be repeated. The frequency of repetition can vary in time so that the warning indication becomes annoying to the user. In this way for example from one apparition per day it will be increased to one apparition per hour if no action is taken by the user. This warning indication is equally advantageously done when starting the decoder. Instead of a text message it is possible to add a pictogram, even a sequence of images describing the stages for changing the card. According to one embodiment, this warning indication is not done in the form of a message but in the form of a simulation of a momentary reception breakdown. All or part of the screen is briefly interfered with a notable effect on the user. The user will then be ready to replace his/her card as soon as possible so as not to see any more the images disappear before him/her. A simple means for doing this function is to use the control words necessary to decode the numerical flux. These control words are calculated by the card, precisely the one that has to be replaced. It is then possible for this card to not supply a word and to provoke the interference on the screen, the decoder being unable to decode the numerical flux. Alternatively this control word can be supplied with a delay, during which the screen will be interfered. It is possible to mix both warning indication means, that is, if the user does not react to the invitation made in the form of a message, the method of interference of the image will confirm the need to do the change. Other important aspects of the invention are the determination of the card's version and of the moment to perform the warning. Smart cards used in pay television decoders contain a relational database. Such an organisation is described in the document EP 0 616 714 and tells us that the base does not contain only the data but that it also contains programmes. Due to the relational organisation of this information (data and programmes) it is necessary to carry out a request of information to determine which is the state of the version of the database. To determine the convenient moment to warn the user, several criteria have to be taken into account. It is clear that if the user is watching a film that he/she has especially purchased, it will be out of the question to interfere with the user's pleasure during this service. It will be best to choose emissions included in the basic subscription and with a low emotional character as opposed to a sports competition. The control centre, in this type of setting, does not only send a target version number as a minimal condition to not interfere the user's screen. The centre can also condition this version to the presence of certain programmes in the database. In the case where the control centre receives return information from the different decoders, it is possible for the centre to determine itself the cards that need an updating. The control centre has means to address each card nominatively to order it the starting of the invitation process to change. This process can be interrupted either by the actual changing of the card of by a command from the control centre. Other forms of warning, for example sonorous, can equally be used in the range of this invention. The use in a pay television system is not the only possible application. The generalisation of the pay services linked to Internet starts also security modules connected to user's computers. When a change is needed, for example to integrate new functions or to change a coding algorithm, the same problem is presented and the present invention allows to prompt the user to change the security module. This prompt will take the form of a message on the screen, a sound, or a graphical animation. Another possibility is to slow down the performances of the security module each time it is requested. Thus a slowing is performed of the functions of this module, a slowing that is accompanied by a message indicating the user the means to recover the original performances. The single Figure illustrates the system according to the invention that comprises a control centre 1 linked with one or several subscriber units composed of a receiver/decoder 2, a security module 3, and a screen 4. For the good functioning of the operations relating to the security of the received data 5, even the sent ones 6, the security module 3 is induced to supply the required keys or cryptograms. One embodiment consists in including in the updating prompt message an information telling the user that he/she will benefit from certain advantages or supplementary services after changing the security module. These advantages can be for example in the form of a supplementary credit, a free viewing of a film or an extension of the subscription period. In a two-way system (pay television, Internet) the updating of the module is detected by the control centre that receives the data from the new module by means of the return channel. The control centre then transmits the necessary data to the security module allowing the introduction of the advantages or supplementary services. In the case where there is no return channel (one-way) the changing of the module is not detected by the control centre. The data flux transmitted by the latter then contains specific data destined to the new module that includes functions that are ready to supply these advantages to the user. A variant of this implementation is possible by the introduction of conditions of granting supplementary services in the security module. From its starting it verifies the conditions of access giving the right to these supplementary services, and if these conditions are fulfilled in accordance with these services. They can have, for example, the form of a Supplementary subscription to a channel during a limited time of a month. WE CLAIM: 1. A method for inducing the physical replacement of a security module (3) of a previous generation for that of a new generation in a user unit (2) connected to said security module (3) comprising the steps of: receiving a replacement prompt command including the minimal characteristics of the new generation of security module (3) from the control center (1); comparing the characteristics of the security module (3) being used with the received minimal characteristics; prompting the user to replace physically the security module (3) according to the results of the comparison. 2. A method as claimed in claim 1, wherein the prompting is done in the form of a text message on a display (4) included in the user unit (2). 3. A method as claimed in claim 1 and 2, wherein the prompting contains information related to the granting of supplementary services transmitted by the control center (1), the granting being conditioned on replacement of the security module (3). 4. A method as claimed in claim 1, wherein the security module (3) is a smart card containing a relational database and wherein the characteristics of the security module (3) being used are established by a relational type request to said database. 5. A method as claimed in claim 1, wherein the prompting is done ii the form of one or several graphical images on a display (4) included in th user unit (2). 6. A method as claimed in claim 2 or 5, wherein the prompting i accompanied by a sonorous signal, in a musical or verbal form. 7. A method as claimed in claim 1, wherein the prompting i reproduced according to a determined cycle. 8. A method as claimed in claim 1, wherein the prompting is carried ou by creating a delay in the information supplied by the security module (3). 9. A method as claimed in claim 1, wherein the user unit is a pa; television decoder and the security module (3) is responsible for the suppl; of the decrypting keys of a pay television stream (5), and wherein thi prompting is done by interrupting the supply of said keys or by modifyinj them. 10. A method as claimed in claim 9, wherein the data stream (5 comprises indications on a nature of the transmitted programs and th 11. A method as claimed in claim 1, wherein the new security module (3) comprises means to transmit an initialization message (6) to the control center (1) containing conditions of replacement, said control center (1) granting access to one or several supplementary services upon receipt of the initialization message. 12. A method as claimed in claim 1, wherein the step of receiving a data stream (5) transmitted by the control center (1) containing specific messages destined to authorize access to one or several supplementary services only if the security module (3) is upgraded. 13. A method as claimed in claim 1, wherein the security module (3) contains data relating to the conditions of granting supplementary services, from its starting, said security module (3) checks access conditions to the supplementary services and allows these supplementary services only if the granting conditions are fulfilled. Dated this 30th day of April, 2003 (RICHA FANDEY) OF REMFRY & SAGAR ATTORNEY FOR THE APPLICANT

Documents:

466-mumnp-2003-cancelled pages(05-06-2006).pdf

466-mumnp-2003-claims(granted)-(05-06-2006).doc

466-mumnp-2003-claims(granted)-(05-06-2006).pdf

466-mumnp-2003-correspondence(12-02-2007).pdf

466-mumnp-2003-correspondence(ipo)-(08-03-2007).pdf

466-mumnp-2003-drawing(05-06-2006).pdf

466-mumnp-2003-form 1(05-06-2006).pdf

466-mumnp-2003-form 1(30-04-2003).pdf

466-MUMNP-2003-FORM 16(9-8-2011).pdf

466-mumnp-2003-form 18(14-11-2005).pdf

466-mumnp-2003-form 1a(30-11-2003).pdf

466-mumnp-2003-form 2(granted)-(05-06-2006).doc

466-mumnp-2003-form 2(granted)-(05-06-2006).pdf

466-mumnp-2003-form 3(05-06-2006).pdf

466-mumnp-2003-form 5(05-06-2006).pdf

466-mumnp-2003-petition under rule 137(05-06-2006).pdf

466-mumnp-2003-power of authority (05-06-2006).pdf

466-mumnp-2003-power of authority (24-01-2002).pdf

abstract1.jpg