Method for controlling copy protection in digital video networks

Abstract

A method and system of providing copy protection of video analog and digital signals and the like, wherein the signals are transmitted via a digital delivery network, and may comprise, for example, pay per view (PPV) program materials protected by copyrights of respective program rights holders. The right holders authorize video service providers (3) to apply copy protection to the program material. The copy protection process is supplied to the rights holders or the service providers (3) by a copy protection process licensor. The video service providers (3) supply suitable copy protection control software via respective control and billing (tracking) centers to generate commands which activate, control and reconfigure the copy protection process being applied to the programs being transmitted. A settop box (10) is provided to each consumer and contains a copy protection circuit which is adapted to apply selected anticopy waveforms to the video signal corresponding to the program material in response to the commands from the service providers (3). Usage data pertinent to each consumer is returned by the settop box (10) to the service providers (3), which then report the copy protection usage to the respective rights holders and process licensor.

Description

BACKGROUND OF THE INVENTION

1. Field of the Invention

This disclosure is directed to a method of controlling copy protection in digital video networks where it is desired to copy protect an analog or digital video output signal associated with a digital video network.

2. Background of the Invention

Various well known copy protection schemes for video signals include that disclosed in U.S. Pat. No. 4,631,603, John O. Ryan, Dec. 23, 1986 and assigned to Macrovision Corporation, incorporated by reference, directed to modifying an analog video signal to inhibit making of acceptable video recordings therefrom. This discloses adding a plurality of pulse pairs to the otherwise unused lines of a video signal vertical blanking interval, each pulse pair being a negative-going pulse followed closely by a positive-going pulse. The effect is to confuse AGC (automatic gain control circuitry) of a VCR (video cassette recorder) recording such a signal, so that the recorded signal is unviewable due to the presence of an excessively dark picture when the recorded signal is played back.

Another analog video protection scheme is disclosed in U.S. Pat. No. 4,914,694 issued Apr. 3, 1990, to Leonard, and assigned to Eidak Corp., incorporated by reference. The Eidak system (see Abstract) increases or decreases the length of each video field from the standard length, either by changing the time duration of the respective horizontal line intervals in each field while keeping a constant, standard number of lines per frame, or by changing the number of horizontal line intervals which constitute a frame while maintaining the standard duration of each line interval.

These video protection systems modify the video signal to be recorded (for instance on tape) or to be broadcast (for instance protected pay-per-view television programs) to make copying by ordinary VCRs difficult or impossible. When a video tape on which is recorded the copy protected video signal is played back for viewing using a VCR, the copy protection process is essentially transparent, i.e., it does not interfere with viewing. However, any attempt made to copy the video signal from the tape using a second VCR to record the output of the first (playback) VCR yields a picture degraded to some extent, depending on the efficacy of the particular copy protection system. These present video copy protection systems protect only analog video signals, which are the type of video signals broadcast and recorded using current consumer video technology.

Some digital and hybrid solutions to the copy protection problem were solved by U.S. Pat. No. 5,315,448, issued May 24, 1994, issued to Ryan and assigned to Macrovision Corporation, incorporated by reference. This patent is directed to copy protection for use with digital signal recording where it is desired to copy protect both an analog and digital signal associated with a digital VCR, and any signal material where the original source material is not copy protectable.

A fundamental revolution is under way that will dramatically affect the delivery of home entertainment. Consumers will soon have hundreds of viewing options from which to choose because of advances in digital compression technologies and the associated reduction in costs accompanying each advance. Because of the increased number of channels more channels will be allocated for pay-per-view (PPV). The increased number of PPV channels will mean video service providers (VSP), also known as PPV providers or system operators, can provide a greater number of movies and more start times, ultimately changing the way many consumers purchase and view movies in their homes. Already, market research experts are predicting that the pay-per-view business will rival today's videocassette rental and sell-through business within 3-5 years.

Even with such a positive outlook for the future of PPV, the full benefits to the consumer of PPV programming may be delayed unless new digital video networks can protect PPV program copyrights. Rights owners are concerned that when digital programming is delivered to the home any digital set-top box will be able to produce a commercial quality video when recorded by a consumer VCR.

SUMMARY OF THE INVENTION

In this new world of direct-to-home video programming, video service providers will be called upon to protect PPV programming against unauthorized copying. They will be obligated to develop and manage the headend (cable) or uplink (satellite) systems which monitor, control, track, and report the application of copy protection on each pay-per-view video program. To this end, the present invention provides copy protection management framework which meets these needs while complementing the more technically detailed copy protection management strategy for video service providers. This framework serves to integrate all components of copy protection delivery in a digital network, and is designed to fit the diverse needs of DBS, Telco, and Cable operators while meeting the requirements of rights owners for a robust and secure environment in which to deliver copy protected PPV programming.

The value of PPV copy protection is maximized when the appropriate control and tracking systems are in place at the video service provider's control and billing centers. These control and tracking systems are best specified during the design phase of the digital signal material delivery system. At a minimum, the following system components are required:

Copy protection-capable set-top boxes

Capability to deliver programmable copy protection configuration

Capability to deliver real time on/off/mode command

Transaction/billing reporting systems/programs

A control and tracking system in accordance with the invention, for providing copy protection for a typical digital delivery system can be best understood through a short case study which begins when a consumer, that is a subscriber, receives a new set-top box. Each set-top box includes a copy protection capable digital-to-analog encoder chip. When the set-top box is initially powered on, the encoder chip is remotely programmed via a video service provider with the desired copy protection configuration. Thus the video service provider's system management software (SMS), also termed hereinafter as system control software (SCS), has the ability to store and track the designated configuration. The configuration information applies to all copy protected programming and is updated only when a video service provider is informed of a change in the process or when a set-top box is initialized.

The copy protection status or option of each program is contained in the video service provider's system control software database. There are several potential copy protection status options. For example, a first option is for copy protection which allows for viewing only at a PPV transaction fee. A second option is for copy protection which allows for taping at a higher transaction fee. A third option is for non-protected program material for which no copy protection is required (for example, broadcast television).

When the consumer selects a viewing choice via an electronic program guide, a correct menu of options is displayed. Once a PPV program is selected by the consumer, the correct copy protection status is applied as determined by the consumer's chosen option and scheduling software of the system control software database. Either the headend/uplink facility's control software or software at the set-top box can determine and send the appropriate on/off/mode command to the copy protection capable digital-to-analog chip of previous mention.

The headend/uplink software communicates the on/off/mode command to the set-top box to correctly set the copy protection for a particular program. The system scheduling software has the capability to prevent copy protection from being applied to any type of program other than PPV programming since copy protection is licensed only for use on PPV programming. After a PPV program is viewed by a consumer, the set-top box is able to communicate to a billing subsystem of the system control software all relevant transaction data. From this data the billing subsystem is able to add this information to copy protection activity reports. These reports contain information such as the number of purchases, retail price, and copy protection usage fees owed to a licensor.

The copy protection process is applied to the analog video signal just prior to its exiting the consumer's set-top box. The application of the copy protection process is controlled and managed by system control/access software of the system control software that resides in the video service provider's operations control and billing center.

All set-top boxes in the network need to contain copy protection circuitry. If a set-top box does not have copy protection capability then the video service provider is able to identify those set-top boxes and deny them copy protected PPV programming.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a diagram depicting a summary of the functions of the present invention.

FIG. 2 is a block diagram depicting a typical digital set top box/decoder of the present invention.

FIG. 3 is a block diagram illustrating an example of the circuitry and architecture of the set-top box of FIG. 2 in further detail.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT

The basic copy protection which is controlled and tracked in accordance with the present invention, is the subject of numerous patents and co-pending applications. The PPV copy protection process works by exploiting the differences between the way television (TV) sets and VCRs respond to video signals. The two components of the anticopy process are known as the automatic gain control (AGC) and Colorstripe™ processes. The purpose of these two separate components or processes is to modify the video signal in a manner which has no effect on a TV set but which inhibits a recording VCR from making a watchable copy.

The combination of the AGC based anticopy process and the Colorstripe™ technology developed specifically for PPV applications results in an overall effectiveness rating of more than 95%. This means that over 95% of unauthorized copies will be either unwatchable or have substantially reduced entertainment value.

Security is also a major factor in the operational effectiveness of PPV copy protection. Security is a measure of the difficulty in bypassing or defeating the anticopy process. Ideally the system is completely undefeatable, but as a practical matter the copy protection system needs to be secure enough to thwart attempted breaches by typical consumers, including reasonably sophisticated consumers. The security system is successful if the vast majority of consumers are prevented from taping PPV programs in the home.

Both video service providers (VSPs), that is, PPV providers, and rights owners benefit when current movie programming is offered to consumers at the same time or shortly after these movies are available on videocassette. Subscribers benefit as well since this scenario provides them with more choices and added convenience.

As digital PPV programming generates increasing revenue for rights owners and becomes a viable viewing option to prerecorded videocassettes, video service providers will be called upon to copy protect PPV programming so that the videocassette rental and videocassette sell-through businesses are not compromised. Rights owners also will require video service providers to monitor, control, track, and report the application of copy protection on each video program for billing purposes.

Copy protection has emerged as a key element in the delivery of PPV programming via digital signal delivery networks. The aggregate system implications of copy protection are very manageable, but only when designed as a part of the overall digital delivery system architecture.

The description of the present invention is intended to apply to systems where one or more video service providers are, or will be in the future, connected to a pay-per-view (PPV) service. The PPV service can be either a video-on-demand (VOD) format, or a near video-on-demand (NVOD) format and digital delivery network, and where set-top boxes (STBs) from multiple manufacturers may be connected to the network. It is assumed that one class of technology will be deployed initially [such as Direct Broadcast Satellite (DBS), Multi-point Microwave Distribution System (MMDS), telephone line or Hybrid-Fiber Coax (HFC)] to be followed by another class of technology at some future date. Although a different technology may arise, it is intended that the invention is applicable to use with multiple platforms and technologies.

FIG. 1 illustrates a control and tracking method and system for enabling and controlling the application of copy protection of video signals and the like via digital video networks. Station 1 represents the issuance of instructions to video service providers by program rights holders who hold the copyrights, for the application by the providers of copy protection to the programs which are protected by per-per-view (PPV) or pay-to-tape (PTT) requirements.

Station 2 depicts a control and billing center of the licensed video service providers who supply copy protection control software for the respective protected programs being broadcast, to generate the commands required to activate, control and reconfigure the copy protection process for each specific PPV/PTT program offering. Although a single provider is depicted, it is understood that station 2 represents any plurality of video service providers each with their respective proprietary control and tracking (billing) software, in accordance with the present invention.

Station 3 represents the procedure of transmitting the particular copy protection command codes of the respective providers, for the PPV/PTT program offerings, via the typical broadcasting networks. Such transmissions may be made by satellite, by microwave, by phone line or by cable transmission systems as depicted.

Station 4 represents the subscriber's home, or other receiving facility, and includes a set-top box 10 for each of a multitude of subscribers. Each set-top box contains copy protection circuitry including a digital color encoder integrated chip (IC), which is adapted to apply selected anticopy waveforms to the analog or digital video signal which is supplied therefrom to a television set or monitor. The receiving facility is further described in FIG. 2 .

Station 5 represents the procedure whereby data identifying each PPV or PTT transaction, including copy protection usage, is sent by the set-top box 10 back through the transmission networks of station 3 , generally to the respective video service provider's control and billing (tracking) center. The center includes billing procedures which are a subset of the system control software and which process the return transaction data to provide for billing the subscriber for the PPV or PTT transaction usage.

Station 6 represents the procedure whereby each of the licensed video service providers report the copy protection usage to the program rights holder, whereby the provider pays the copy protection fees to the rights holder, i.e., the licensor.

FIG. 2 illustrates in further detail the subscriber's facility, station 4 of FIG. 1 , receiving the digital, and usually compressed, pay-per-view transmissions from the broadcasting networks depicted as station 3 of FIG. 1 . The compressed digital video signal, or the like, is supplied to the respective set-top box 10 of a multitude of set-top boxes, wherein each box includes conventional circuits for converting and decoding the digital compressed video signal to an analog (baseband) video signal. The set-top box 10 also includes a digital color encoder IC 20 of previous mention which contains copy protection circuitry for applying the selected copy protection waveforms to the analog (or digital) video signal, namely, the programs which are being protected. In this example, the copy protected analog baseband video is supplied by the set-top box to a TV set 22 where the pay-per-view protected program clearly is displayed for viewing if the subscriber is authorized to view the program. If the subscriber is not authorized for a particular PPV protected program, the corresponding picture is modified so as to be un-viewable.

In the event a subscriber records the PPV protected program via a VCR 24 to obtain a taped copy 26 without authorization, the unauthorized copy will be degraded to the degree that it is un-watchable, as depicted by a TV set 28 . However, if the subscriber subscribes to a pay-to-tape transaction and to the required higher PTT transaction fee, then the copy is authorized and the resulting taped copy would readily be watchable.

Referring to FIG. 3 , there is illustrated in further detail an architecture of the set-top box(es) 10 of FIGS. 1 , 2 . Upon power up of the set-top box 10 the configuration bits stored in flash memory 48 are read and written into the appropriate CP control registers 52 in the NTSC/PAL encoder 20 . When the compressed digital video signal, including the copy protection control commands of previous and following discussion, are supplied by the delivery network of previous mention (satellite, HFC, MMDS, phone line) to a demodulator circuit 32 , as depicted by an input lead 30 . The demodulated video/audio and control signals are supplied to a demultiplexer circuit 34 where the video/audio signals are separated into respective channels and supplied to an MPEG-2 decoder and digital decompression circuit 36 . The copy protection control commands are supplied from the demultiplexer 34 to a conditional access system module 38 . The commands are supplied to a microprocessor in a CPU 40 . The CPU processes information located in memory that is associated with the Electronic Program Guide (EPG) 46 or runs the copy protection application software 44 residing in memory 42 to deliver the activation command to the NTSC/PAL encoder 20 . The EPG may also have data which is used to determine if copy protection should be activated. There are additional methods that may be employed to activate copy protection.

In response to the control commands, the CPU 40 supplies control signals to the NTSC/PAL encoder IC 20 of previous mention, FIG. 2 . The encoder IC 20 includes copy protection control registers 50 , 52 for receiving the mode bits and configuration control bits respectively, of previous and following discussion. The configuration bits 52 determine the form of the copy protection (i.e., where the Pseudo Sync and AGC pulses will be located or positions of the colorstripe lines etc.) The on/off/mode byte 50 determines which components of the copy protection process will be activated. See table 1 below. The encoder IC 20 also receives decompressed video from the MPEG-2 decoder and digital decompression circuit 36 . Encoder IC 20 outputs a RF signal, a composite video signal and/or an S-video signal via video leads 54 . The decompressed audio signal is supplied from the circuit 36 to an audio processing circuit 56 which, in turn, outputs left and right channel stereo signals and/or an AC-3 signal on audio leads 58 .

In accordance with the invention, the set-top box needs to satisfy certain requirements to insure that the copy protection process is correctly generated, controlled and tracked. Control and tracking of the copy protection process usage takes place at the VSP's control and billing center, station 2 of FIG. 1 . This in turn requires that certain capabilities exist which involve the set-top box, the system control and the billing systems and programs in order to satisfy these requirements.

There follows a description of the requirements which ensure that the copy protection process or technique is correctly activated and controlled and its usage tracked. It is expected that if non-compliant set-top box hardware is attached to the digital delivery network, that each licensed service provider will be able to identify such hardware as non-compliant and will withhold copy protected programs from the respective subscriber.

Implementation of these control requirements over the network (i.e. control of the anticopy process from the program origination control and billing center) requires knowledge of the set-top box control system and process, the application program interfaces (API) present at the box and the dialog between it and the integrated circuit (IC) which incorporates the copy protection apparatus.

Copy protection control software (CPCS) is a software module or set of software modules that reside in the service provider's system control software (SCS). It provides a system operator (that is, the service provider) with an interface to manage the necessary attributes of the pay-per-view copy protection in accordance with the present invention.

For security reasons there needs to be the capability to control access to the CPCS from the system control software. This restriction is designed to limit access to the CPCS for control of the copy protection process. The operating system supporting the SCS is generally the first level of security. Every employee is required to enter a login account and password. Without these an employee is denied access. The employee's account specifies the respective privileges. A system administrator of the service provider is responsible for the assignment of the employee's privileges.

Thus, every executable file residing on the host which is capable of modifying the operational status of the copy protection process has permissions restricted to authorized personnel. Without the proper permissions, the personnel are unable to run the executable software.

The CPCS is the portion of the video service provider's software control where the decision to apply the options of pay-per-view and pay-to-tape are applied on a program-by-program basis.

There is access control to the CPCS either through password control or the assignment/denial of privileges through software. If password control is the selected method then once the correct initial password is entered, CPCS forces the selection of a new password for future access to CPCS. In this way the service provider can limit access to CPCS to those employees who carry the authority to modify the copy protection database. The password is valid for a reasonable amount of time before it expires and selection of a new password is required.

Additionally there is an access control to a subsystem within the CPCS that allows the modification of selected bits which define the configuration control and mode, and thus determine the characteristics, of the copy protection process. Any unauthorized changes to these bits can result in severe playability and effectiveness problems. In order to maximize the security of the system the video service provider needs to have a short list of personnel who are authorized to change these bits.

A mode control group controls access to the mode bits. This group has the ability to change the contents of the mode byte(s) which is sent with each PPV program to activate or deactivate the copy protection process. The membership of this group is controlled by the system administrator. The number of the service provider's personnel allowed in this group is kept to a minimum.

Similarly, a configuration control group controls access to the configuration bits. This group has the ability to change the contents of the configuration bits which define the copy protection process. These are the bits that are sent periodically to every set-top box to assure that all boxes are using the correct version of the process. The number of the service provider's personnel allowed in this group also is kept to a minimum.

Each password described below should be at least eight (8) alpha-numeric characters in length. The system administrator is responsible for defining and distributing the current password to the authorized personnel. Each password described below should have a life of no more than four months before the system administrator changes the password.

Password access to the software that applies or removes the copy protection process on a program-by-program basis is designed to query mode or configuration control group authorized personnel for an authorization password to ensure that they are a member. If the authorized personnel correctly enter the password they will be allowed to apply or remove the copy protection for a particular PPV or series of PPV events. Conversely, if authorized personnel fail to enter the password they must be denied access to that portion of the database. It is the system administrator's responsibility to ensure that only authorized personnel know the password for either the mode or configuration control. An authorized personnel will be given three attempts to login before a message is generated for the system administrator that an unauthorized request to modify the application or remove the copy protection has been made.

Alternative proposals for accessing CPCS and controlling access to the mode and configuration of the copy protection process may be developed by one skilled in the art.

The CPCS will perform the following functions: Copy protection on/off and mode control; copy protection validation; functionally unlocking copy protection capability in a set-top box; and copy protection process configuration reprogramming.

The copy protection process which is incorporated in the set-top box is controlled by the CPCS at the licensed video service provider's control and billing central location. The need to invoke copy protection on an individual program forms part of a descriptor for each program. A default for copy protection within the descriptor needs to be turned off (i.e., no copy protection).

Steps need to be taken to prevent copy protection being applied to non-PPV program channels, since copy protection can be licensed only for PPV programming. If the system control software automatically verifies that a program is designated for PPV use, this requirement may be automated. Similarly, access to CPCS may be automatically denied for non-PPV programming. If such an automatic verification is not made, a warning notice is generated when CPCS is accessed to change the copy protection status of a program. This notice needs to be displayed until a specific keyboard entry is made to acknowledge the warning.

In the case of MPEG signals, the MPEG copyright header bits on their own are not sufficient to activate copy protection in the set-top box. The following reasons are the basis for not allowing the MPEG header bits to be used as the sole control of the copy protection process. An application routine is required in order to (a) differentiate between digital-to-digital and digital-to-analog copy protection conditions, (b) provide sufficient control capacity to set the copy protection operating mode, and (c) facilitate access to the copy protection system only by licensed video service providers.

It is preferred that the anticopy process on/off control is achieved by setting all the individual parameter on/off and mode control bits rather than a master on/off control. This requires that the N 0 (N-zero) bits in the control bit listing be set as required. Depending on the individual system, this will require the control of from 5 to 8 bits.

The delivery of the mode byte to the set-top box to activate or deactivate the copy protection process may be accomplished in several ways. Each method has its positive aspects as well as its negative aspects. When selecting a mechanism to control the copy protection technology, a service provider selects one of the following means or may develop an entirely new means.

One method may be for the mode byte to be delivered via the conditional access system via the entitlement control message (ECM). Another method might be to include the mode byte in a private data field in the MPEG transport data stream.

Another method may deliver the mode byte in a user defined section of the electronic program guide (EPG) that is not identified in released documentation as controlling copy protection. This method also requires some additional security to keep the memory location of the mode byte from being accessed for unauthorized changes and the setting of a return flag that indicates the actual status of the mode byte when transmitted to the NTSC encoder.

Another method may be a combination of the conditional access ECM and EPG. The transport of the mode byte in the EPG could be combined with two bits within the ECM. To activate the copy protection technology then it would be an or operation between the ECM bits and the EPG bits. If either is set, the copy protection technology, both ECM and EPG would have to indicate that deactivation is necessary.

When a copy protected PPV program is viewed, part of the information that will need to be tracked will be the actual setting of the mode byte. In this way both the copy protection process and the service provider will have a means to discover if copy protection has been circumvented in the set-top box. The return flag may be a simple bit set to ‘true’ to indicate that the copy protection process was correctly activated and ‘false’ if it was incorrectly activated. It is required that the mode byte be sent to the NTSC encoder on a periodic basis. The frequency of the transmission is on the order of once every minute.

Setting the operating mode of the copy protection process requires independent activation of the three component parts of the copy protection process (pulses within the vertical blanking interval, pulses at end of field, colorburst phase modification) and up to 5 additional mode set parameters using N 0 bits as indicated above.

Access to copy protection at the set-top box by the video service provider needs to be restricted to authorized providers. This should not to be confused with access to the CPCS as defined earlier. It follows that each system operator or video service provider is required to procure the means (i.e., keys/codes, etc.) to activate the copy protection system control software on a program-by-program basis. When a service provider obtains the means to activate copy protection, the provider will gain access to the copy protection process at the set-top box. The copy protection process (i.e. on/off/mode or reprogramming commands) at the set-top box needs to have controlled access such that only authorized providers can issue valid commands to the box. The set-top box needs to reject commands for the copy protection process from unauthorized video service providers.

Set-top boxes such as depicted in FIGS. 1 , 2 , may be shipped by the manufacturer with the copy protection capability installed, but functionally locked. This means that the set-top box will not respond to any copy protection control codes. However, the set-top box will be unlocked (i.e. enabled) by a message initiated via the CPCS or SCS and sent through the system by a licensed video service provider. This message may be sent as part of the log-on routine when a subscriber accesses a provider. This message need only be acted upon once by the set-top box during the lifetime of the box. Only authorized video service providers are provided with the unlocking message data.

The copy protection unlock message consists of at least 8 bytes. The set-top boxes are manufactured with an appropriate unlock message code. This code is provided by the set-top box manufacturer only to a copy protection licensor, who in turn provides the code to licensed video service providers. The copy protection unlock message is different for each set-top box manufacturer, but is the same for all boxes made by that manufacturer.

Alternative proposals on the methodology to enable the copy protection process in the set-top box will be apparent to those skilled in the art.

To ensure that over the life of the set-top box the copy protection process provides the maximum effectiveness with VCRs and compatibility with TV sets, the copy protection system needs to be upgradeable on a system-wide basis by means of commands initiated by the CPCS. This will result in new process configuration data being transmitted. In response, the set-top box processes the data to reconfigure the adjustable parameters of the copy protection process. The set-top box may be placed in a “diagnostics” mode for this feature implementation, or the configuration data may be sent and acted on by the box on a routine basis as part of the program description data or log-on routine.

However, it is recommended that the entitlement control message (ECM) be used. The ECM is embedded in the conditional access system.

In one version, configuration data of 108 bits is provided to accommodate the reconfiguration data, however, 108 bits does not fall on a byte boundary. Therefore, it is recommended that 112 be sent with a pad 0 . The data is presented to the service provider in the form of hexadecimal numbers for entry into the CPCS. The 112 bits thus are entered as a string of 28 hexadecimal numbers.

In another version, configuration data of 132 bits is provided to accommodate the reconfiguration data, however, 132 bits does not fall on a byte boundary. Thus, it is recommended that 136 be sent with a pad 0 . The data is presented to the provider in the form of hexadecimal numbers for entry into the CPCS. The 136 bits thus are entered as a string of 34 hexadecimal numbers.

It is possible to verify the current configuration stored by the CPCS by accessing the current contents of the configuration bits presented as the correct number hexadecimal characters. An alpha-numeric password of at least 8 bytes is required to gain access to change the programming data within CPCS. This password is separate from the password which allows access to CPCS. The service provider has the option of receiving the ‘C’ source code of an executable file to which to pass parameters.

The following warning notice is presented on the screen of the operational control and billing center of a provider after entering the correct password:

WARNING

Changing this copy protection configuration data without the written authorization carries the serious risk of problems with the performance of the copy protection system and degraded picture quality.

This warning notice is displayed until a specific keyboard entry is made to acknowledge the warning.

By way of example only, Table 1 illustrates a mode control bit listing which defines the corresponding bit pattern or command, which provides the routine on/off and mode selection functions when transmitted to the set-top boxes via the delivery networks. The configuration control bit listing is generally equivalent to that of the mode control, though relatively longer since it controls considerably more control and reprogramming functions.

TABLE 1
Mode Control Bit Listing
Routine On/Off and Mode Selection
NO	On/off and mode control; 8 bits
NO[7]	Reserved		CPC0[3]
NO[6]	Pay-to-tape allowed/prohibited	(Allowed = 1,	CPC0[2]
		Default = 0)
NO[5]	VBI pulses On/Off (VBIP)	(ON = 1)	CPC0[1]
NO[4]	End of Field Back Porch Pulses	(ON = 1)	CPC0[0]
	on/off (EOFP)
NO[3]	Colorstripe process On/Off (CSP)	(ON = 1)	CPC1[3]
NO[2]	AGC pulse normal (amplitude	(Cycling =	CPC1[2]
	cycling)/static mode select	Default = 1)
	(AGCY)
NO[1]	H-sync amplitude reduction	(ON = 1)	CPC1[1]
	On/Off (HAMP)
NO[0]	V-sync amplitude reduction	(ON = 1)	CPC1[0]
	On/Off (VAMP)

The pay-per-view transaction information is collected by each video service provider for each subscriber so that monthly copy protection activity reports required for royalty payments and other fees may be generated. The reports include information regarding the number of subscribers accessing each copy protected program, with subtotals of the copy protection status or options selected by respective subscribers. The reports further include information sorted by PPV title, PPV program supplier, copy protection activation status requested by the subscriber, and by set-top box model code. The reports are provided by the report generating software of previous mention at the video service provider centers.

The activity report includes a manufacturer and model type descriptor code in the transaction acknowledgment between the set-top box and the control and billing system when a PPV purchase transaction is reported to the provider.

The CPCS and the set-top box are capable of applying and reporting anticopy usage according to the following conditions. The overall system allows the subscriber's copy protection to be turned off at the box only as permitted by the PPV program rights holder.

(a) PPV program rights holder permits viewing only:

The pay-to-tape mode is prohibited (off). All STBs output copy protected waveform only. I.e., the copy protection waveform unconditionally appears on the set-top box analog video output signal.

This is reported to the billing system as a “pay-per-view” copy protected transaction.

(b) PPV program rights holder permits viewing and recording:

The pay-to-tape mode bit is set for pay-to-tape permitted (on). Under this option, when the subscriber selects the “pay-to-tape” option, the copy protection process is turned “off” in the STB to allow the PPV program to be recorded (taped) for a higher transaction fee than for “viewing only.” I.e., the copy protection waveform will not be present on the STB analog video output signal.

This is reported to the billing system as a “pay-to-tape” copy protected transaction.

The following Table 2 provides a summary of the control options and includes additional information.

TABLE 2
Pay-per-view and Pay-to-tape Control Options
for Pay-per-view Programs
	Consumer
	Request
	(Pay-per-view
Program Descriptor of	or
PPV Program	Pay-to-tape)	Result
Copy protection NOT	N/A	ACP off
required
Copy protection	Pay-per-view	ACP will be ON.
REQUIRED		Pay-per-view transaction
Taping NOT permitted		cost incurred by consumer.
Copy protection	Pay-to-tape	Requested option not
REQUIRED		available.
Taping NOT permitted		ACP will be ON.
		Pay-per-view transaction
		cost incurred by consumer.
Copy protection	Pay-per-view	ACP will be turned ON by
REQUIRED		STB control system.
Taping permitted (at		Pay-per-view transaction
higher transaction cost)		cost incurred by consumer.
Copy protection	Pay-to-tape	ACP will be turned OFF by
REQUIRED		STB control system.
Taping permitted (at		Pay-to-tape transaction
higher transaction cost)		cost incurred by consumer.

It is to be understood that various terms employed in the description herein are interchangeable. For example, a “video service provider” also is known as a pay-per-view (PPV) provider or a system operator, and the “system management software” preferably is referred to as the system control software. Likewise, the “control and billing centers” of the PPV providers represented by station 2 (and generally station 5 ) also may be referred to as operations control/tracking centers, program origination/termination centers, headend (cable) uplink (satellite) control centers, etc. A licensed PPV provider facility supplies the necessary control instructions to associated software and/or circuitry in a set-top box to allow a respective subscriber access to program material to which he or she is entitled, and also receives at designated times of the week, month, etc., the usage data automatically returned by the set-top box. A billing and license fees software subset of the system control software then enables each PPV provider to bill the subscribers and to report and pay the attendant licensing fees to the rights holders, etc.

Accordingly, the above description of the invention is illustrative and not limiting. Further modifications will be apparent to one of ordinary skill in the art in light of this disclosure. For example, although the invention is described herein relative to a video signal, and primarily an analog video signal, it is to be understood that the invention concepts may be applied to other signals with properties equivalent to a video signal where copy protection is desired. Likewise, the invention is applicable to the copy protection of digital as well as analog signal materials, such as those disclosed in the U.S. Pat. No. 5,315,448 of previous mention. Further, although a specific example of a code word is disclosed herein for enabling the copy protection process via the set-top box, other combinations and numbers of bits may be employed. In addition, a selected portion of the control software for effecting the copy protection process may reside in the set-top box in the form of an insertable “smart” card, wherein for example the smart card contains the data concerning the subscriber's options and privileges.

Thus, the scope of the invention is defined by the following claims and their equivalents.

Claims

1. A method of providing copy protection of signal material transmitted via digital delivery networks to a consumer's set-top box, to prevent copying and/or subsequent viewing of a recorded copy of the signal material, comprising:supplying copy protection controls indicative of desired copy protection for the signal material; storing a copy protection configuration corresponding to the desired copy protection in the set-top box; transmitting commands derived from and in response to the copy protection controls which activate the copy protection configuration for the signal material; and applying the copy protection configuration to the signal material in response to the commands to prevent the subsequent viewing of the recorded copy of the copy protected signal material while allowing viewing of the original signal material as via a television set; wherein the step of supplying includes; establishing requirements for activating and controlling a process which enables the application of said copy protection configuration and which reports the corresponding usage thereof; and providing copy protection control software in response to the requirements, which software provides said copy protection controls to activate and control the application of the copy protection configuration and the usage reports.

2. The method of claim 1 wherein the step of establishing includes:establishing requirements which differentiate between digital-to-digital and digital-to-analog copy protection conditions, which determine a copy protection process operating mode and configuration, and which ensure that there is only authorized access to the copy protection process.

3. The method of claim 1 wherein the step of providing includes:generating commands in the form of bit patterns in response to the copy protection control software; and said commands including a first mode bit pattern which enables real time on/off/mode control for selecting components of the copy protection configuration, and a second configuration bit pattern which determines a programmable copy protection configuration.

4. The method of claim 3 including:receiving the transmitted first and second bit patterns to activate the copy protection and to control and reconfigure the copy protection process respectively in response thereto; and wherein the anticopy waveforms are applied to the signal material to provide the copy protection.

5. The method of claim 1 including:limiting access to the steps of establishing and providing to prevent unauthorized access to the application of the copy protection process or to the copy protection control software which activates and controls the process.

6. The method of claim 1 wherein the step of applying includes:storing the copy protection controls in memory at a consumer's set-top box; and storing control data in memory at a signal material receiving set-top box, which stored control data is responsive to the transmitted commands to activate, control and reconfigure the stored copy protection configuration.

7. The method of claim 1 including:collecting periodic copy protection activity information including copy protection activation status such as the number of pay-per-view and pay-to-tape signal material events watched.

8. The method of claim 7 further including generating reports which include the number of accessing receiving set-top boxes, the rights holder of the signal material events, the number of total events watched, and corresponding billing information.

9. The method of claim 1 wherein the step of applying includes:modifying a selected synchronizing signal in a corresponding blanking interval of a television line in response to said commands to degrade a subsequent decoding of the synchronizing signal in the event that a recording is made of the corresponding copy protected signal material.

10. The method of claim 1 wherein the signal material is a video analog or digital signal.

11. A method of providing copy protection of signal material transmitted via digital delivery networks to a consumer's set-top box, to prevent copying and/or subsequent viewing of a recorded copy of the signal material, comprising:supplying copy protection controls indicative of desired copy protection for the signal material; storing a copy protection configuration corresponding to the desired copy protection in the set-top box; transmitting commands derived from and in response to the copy protection controls which activate the copy protection configuration for the signal material; and applying the copy protection configuration to the signal material in response to the commands to prevent the subsequent viewing of the recorded copy of the copy protected signal material while allowing viewing of the original signal material as via a television set; wherein the step of supplying includes; developing copy protection control software which describes control signals for applying the copy protection process to the signal material and for returning to a service provider usage data indicative of the signal material selected at the consumer's set-top box; generating mode and configuration control bit patterns in response to the copy protection control software; and transmitting said control bit patterns to the consumer's set-top box when the consumer joins the delivery network and thereafter on a prescribed routine basis.

12. The method of claim 11 including:storing in the set-top box the configuration control bit pattern which determines the form of the copy protection process; and enabling the stored configuration control bit pattern in response to the transmitted mode control bit pattern to selectively activate and/or modify the configuration of the copy protection process.

13. The method of claim 12 including:modifying the configuration control bit pattern commensurate with a desired change in the form of the copy protection process; and transmitting the modified configuration control bit pattern to the set-top box to effect the change in the copy protection process.

14. The method of claim 12 including:storing consumer information in the set-top box which is indicative of copying options desired by the consumer; and comparing the mode control bit pattern to the stored consumer's information in the set-top box when a selection of the signal material is made to determine if the consumer is authorized to view only and/or to copy the material.

15. The method of claim 11 wherein the signal material is a pay-per-view (PPV) or pay-to-tape (PTT) signal and the step of supplying includes:establishing requirements for activating and controlling the PPV and PTT copy protection process and for reporting the corresponding usage activity of the process to the service provider; and providing copy protection control software m response to the requirements, which software provides said control bit patterns to activate, control and modify the PPV and PTT copy protection process.

16. The method of claim 15 including:providing limited access to the steps of establishing and providing to prevent unauthorized access of service provider personnel to the control of the copy protection process or to the copy protection control software.

17. The method of claim 15 wherein the signal material is a pay-per-view or pay-to-tape video analog or digital signal.

18. The method of claim 15 wherein the step of applying includes:modifying a selected synchronizing signal in a corresponding blanking interval of a television line in response to said control bit patterns to degrade any subsequent decoding of the synchronizing signal when an unauthorized attempt is made to view or copy the pay-per-view signal.

19. A method of providing copy protection of signal material transmitted via digital delivery networks to a consumer's set-top box, to prevent copying and/or subsequent viewing of a recorded copy of the signal material, comprising:supplying copy protection controls indicative of desired copy protection for the signal material; storing a copy protection configuration corresponding to the desired copy protection in the set-top box; transmitting commands derived from and in response to the copy protection controls which activate the copy protection configuration for the signal material; applying the copy protection configuration to the signal material in response to the commands to prevent the subsequent viewing of the recorded copy of the copy protected signal material while allowing viewing of the original signal material as via a television set; receiving and writing a mode control bit pattern in the set-top boxes; and wherein the stored copy protection configuration responds to the transmitted mode control bit pattern to activate, control and modify the copy protection process as defined by the mode control bit pattern.

20. The method of claim 19 wherein the set-top box is functionally locked including:downloading via the service provider a selected bit pattern or software adapted to functionally unlock the set-top box.

21. A system for controlling copy protection of proprietary signal material transmitted via digital delivery networks, wherein a service provider enables a copy protection process which prevents unauthorized copying and/or subsequent viewing of the recorded signal material by consumers even when the original signal material is watchable, the system comprising:a control/billing center for supplying copy protection control signals as directed by the service provider; wherein said copy protection control signals define a first mode command which enables real time mode control as well as on/off control of selected components of the copy protection process, and a second configuration bit pattern command which determines a programmable operating configuration of the copy protection process; a transmitter for transmitting the signal material, the first mode command and the second configuration bit pattern command in response to the copy protection control signals to selectively control the copy protection process; and a device located with each consumer for applying said programmable operating configuration of the copy protection process to the signal material in response to the transmitted first and second commands to prevent copying and/or subsequent viewing of the recorded signal material while allowing watching of the signal material.

22. The system of claim 21 wherein the copy protection control signals include an access password for identifying that a service provider's authorized personnel have access to and control of the copy protection process.

23. The system of claim 21 wherein the device located with each consumer is a set-top box having an encoder containing a copy protection circuit adapted to add anticopy signals in the form of said programmable operating configuration to the signal material in response to the first mode command signal.

24. The system of claim 23 wherein:the set-top box includes memory for storing the configuration bit pattern of the second command separately from the first mode command; and the encoder includes a buffer for receiving the mode command and the configuration bit pattern and circuitry for controlling the activation and configuration of the copy protection process in response to the first mode command with the configuration being determined by the configuration bit pattern.

25. The system of claim 23 wherein the set-top box sends usage data back to the service provider's control/billing center, the usage data being used by the service provider to bill the consumers and to provide a report of the usage and corresponding license fees.

26. The system of claim 21 wherein the signal material is a pay-per-view or pay-to-tape video analog or digital signal.

27. The system of claim 21 wherein the control/billing center includes:instructional information for establishing requirements for activating and controlling the copy protection process and for reporting the copy protection activity; and wherein the service provider supplies copy protection control software corresponding to said requirements and said copy protection control signals in response to the copy protection control software.

28. A method for providing copy protection of signal material transmitted via digital delivery networks, to prevent copying and/or subsequent viewing of the recorded signal material while allowing viewing of the original signal material, comprising:generating at least first and second copy protection commands, wherein the second command comprises a changeable configuration bit pattern indicative of a corresponding programmable copy protection configuration for application to the signal material; transmitting the signal material and the first and second copy protection commands to a plurality of remote devices coupled to the networks and; in response to the copy protection commands, activating the configuration bit pattern defining the programmable copy protection configuration for the signal material in one or more remote device to prevent said copying and/or subsequent viewing of the recorded signal material while allowing viewing of the original signal material.

29. The method of claim 28, including:storing the changeable configuration bit pattern in respective remote devices; and wherein the configuration bit pattern is recovered from storage in response to the first copy protection command to activate the copy protection for the signal material thereby modifying the signal material such that a copy thereof is un-viewable, is viewable but un-copiable or to cause the remote devices to stop outputting the signal material.

30. The method of claim 28, wherein the step of generating comprises:establishing requirements for activating and controlling the copy protection process and reporting corresponding usage thereof; providing copy protection software in response to the selected requirements; and generating the first and second copy protection commands in response to the copy protection software to update, activate and control the programmable copy protection configuration and usage reports.

31. The method of claim 30, wherein the step of establishing includes establishing requirements to differentiate between digital-to-digital and digital-to-analog copy protection conditions, to determine a copy protection process operating mode for the first copy protection command and the configuration bit pattern of the second command, and to ensure only authorized access to the copy protection process is allowed.

32. The method of claim 30, wherein the first and second copy protection commands include a first bit pattern for on/off/mode control and a second bit pattern which defines the programmable copy protection configuration.

33. The method of claim 32, wherein authorized access to the copy protection process and the copy protection software is limited to selected employees.

34. The method of claim 30 wherein the usage reports are based on pay-per-view and pay-to-tape activities of the signal material.

35. The method of claim 34 further including the step of generating reports having information on identity of rights holder of the signal material, number of times the remote devices are accessed, number of events watched, and corresponding billing information.

36. The method of claim 28, wherein the signal material is a pay-per-view or pay-to-tape video analog or digital signal.

37. A system for controlling copy protection of signal material transmitted via digital delivery networks coupled to a plurality of remote devices, wherein a service provider enables a copy protection process which prevents copying and/or subsequent viewing of the recorded signal material even when the original signal material is viewable, the system comprising:a controlling/billing center for supplying at least first and second copy protection control signals as directed by the service provider; wherein the second control signal is a configuration bit pattern indicative of a programmable copy protection configuration; a transmitter for transmitting first and second commands commensurate with the first and second copy protection control signals to determine and control the copy protection process; and at least one remote device including an encoder coupled to the networks and responsive to the first and second commands for applying the programmable copy protection configuration to the signal material in response to the first command to prevent the copying and/or subsequent viewing of the recorded signal material even when the original signal material is viewable.

38. The system of claim 37, including:a memory for storing the configuration bit pattern indicative of the programmable copy protection configuration; and circuitry for recovering the configuration bit pattern from the memory for activating the copy protection for the signal material thereby modifying the signal material such that a copy thereof is unviewable, is viewable but un-copiable or to cause the remote devices to stop outputting the signal material.

39. The system of claim 37, wherein the first and second copy protection control signals comprise:a first bit pattern for on/off/mode control; and a second bit pattern which defines the programmable copy protection configuration.

40. The system of claim 39, wherein the copy protection further comprises an access password for ensuring that only authorized access by service provider personnel is allowed to control the copy protection process.

41. The system of claim 39, wherein the remote devices monitor and provide usage data to the controlling/billing center to enable generating usage and associate license fee reports for billing purposes.

42. The system of claim 39, wherein the signal material is a pay-per-view or pay-to-tape video analog or digital signal.

43. A method of providing copy protection of signal material transmitted to remote devices via digital delivery networks to prevent copying and/or subsequent viewing of a recorded signal material, comprising:receiving copy protection commands at one or more of the remote devices, which commands are indicative of desired copy protection for the signal material and which are transmitted by a control center coupled to the digital delivery networks; wherein the copy protection commands include a first bit pattern for enabling mode control as well as on/off control of the copy protection, and a programmable second bit pattern for determining the configuration of the copy protection to be applied to the signal material; and activating the copy protection for the signal material by applying the copy protection configuration determined by the programmable second bit pattern in response to the first bit pattern to prevent unauthorized copying and/or subsequent viewing of the recorded signal material.

44. The method of claim 43, wherein the first bit pattern is compared against information provided by a consumer in the one or more remote devices, which information is indicative of desired viewing and/or copying options to determine whether the consumer is authorized to receive, view and/or copy the signal material.

45. The method of claim 43, wherein the remote devices generate and transmit reports having information on identity of a rights holder of the signal material, number of times the remote devices are accessed, number of events watched, and corresponding billing information, to the control center.

46. The method of claim 43, wherein access to the copy protection commands by personnel in the control center is restricted to prevent unauthorized access.

47. The method of claim 43, wherein the signal material is a pay-per-view or pay-to-tape video analog or digital signal.

48. A device coupled to digital delivery networks for controlling copy protection of signal material transmitted via the digital delivery networks, to prevent copying and/or subsequent viewing of a recorded signal material, the device comprising:a central processing unit (CPU); memory coupled to the CPU for storing instructions and information associated with copy protection control commands, the copy protection control commands being indicative of desired copy protection for the signal material and which are transmitted to the device by a control center via the digital delivery networks; wherein the information associated with the copy protection control commands includes a first mode bit pattern for on/off/mode control which enables real time mode control of selected components of the copy protection process, and a second configuration bit pattern for determining a programmable copy protection configuration of the copy protection process; and an encoder circuit coupled to the CPU and the memory for receiving the first mode bit pattern and the second configuration bit pattern, wherein the CPU executes the instructions stored in the memory in response to the copy protection control commands to provide commands to the encoder circuit which apply the programmable copy protection configuration to the signal material in response to the first mode bit pattern to prevent the unauthorized copying and/or subsequent viewing of the recorded signal material.

49. The device of claim 48, wherein the CPU compares the first mode bit pattern against information provided by a consumer and stored in the memory which indicates desired viewing and/or copying options to determine whether the consumer is authorized to view and/or copy the signal material.

50. The device of claim 49, wherein the memory further stores information provided by a consumer including the identity of rights holder of the signal material, number of receiving facilities that are accessed, and number of events watched, the device reporting the information provided by the consumer to the control center for billing purposes.

51. The device of claim 48 further comprising a conditional access module coupled to the CPU, the conditional access module preventing unauthorized access by personnel in the control center to the information associated with copy protection commands stored in the memory.

52. The device of claim 48, wherein the signal material is a pay-per-view or pay-to-tape video analog or digital signal.