1. Field of the Invention
The present invention relates to semiconductor integrated circuits, and in particular to integrated circuits used in devices providing multiple purposes to end users, such as television, audio, Internet access, telephone service and the like.
2. Description of the Related Art
Increasingly, consumer products are being developed as multiple purpose devices. Examples include using mobile telephones to function as MP3 players, cameras & radios, using portable storage devices as media players and using television “set top boxes” as devices to access the Internet and provide telephone services. In such devices, the different purposes can be provided by different integrated circuits, or increasingly by multiple purpose integrated circuits.
Integrated circuits (computer chips) that support digital television often have extensive mechanisms for protecting encrypted data against viewing or distribution by or to devices that are not entitled to do so. These “conditional access” systems employ a significant amount of hardware to protect these systems against attack by persons wanting to view, distribute or sell systems that can circumvent security for third parties.
Computer chips that support cable modem applications, which deliver high-speed Internet access using a common cable with the cable that delivers digital television, also support security mechanisms. The drive for cost reduction through super-integration and the focus that cable companies have on selling multiple services to each consumer (telephone, television and internet) has lead to the integration of cable modem and set-top box functions in a single chip.
We have appreciated the need to provide integrated circuits capable of providing multiple purposes or services, such as those discussed above to end users. We have also appreciated, though, that where possible real-time functions of each service should be isolated to provide robustness in each service.
We have appreciated, for example, that most consumers prefer the performance of the telephone and internet service to be independent of the activity on their television and that a malfunction on one service should allow all other services to continue unaffected.
One embodiment of the invention allows selected services provided by different parts of a chip to be selectively isolated from one another, thereby allowing each service to continue in the event of failure or degradation of the service provided by another part. The embodiment can be implemented in a variety of different chips, though the preferred application is in a chip used for both cable modem and conditional access television purposes. In this application, the functions provided by a single integrated circuit related to the two functions that are commonly implemented on different chips (the cable modem, telephone and TV/Video functions), are isolated so as not interfere with each other. A malfunction in one function does not affect the other.
The preferred embodiment comprises a plurality of units that may act as initiators and targets. At least some of the units being for a first purpose such as a cable modem function and others being for a second purpose such as television data processing. The units are connected together by an interconnect bus comprising a number of nodes. At least one of the nodes is configurable such that requests made from initiator units on one side of the node to target units on the other side of the node are not sent to the target units. In practice, multiple nodes will be so configured forming an interconnect that can be configured as above. The units for the first purpose are arranged on the opposite side of the interconnect from those of the second purpose, so that the circuit is effectively configurable into two separate logical partitions, one partition for television data processing and the other partition for cable modem functions.
The logical partitions so formed are thereby arranged so that units within each partition can communicate with one another along the interconnect or bus, but units from one partition cannot communicate with units in the other. This provides a single chip having effective independent operability for two different purposes.
In addition to the interconnect nodes not sending requests from one side of the logical partition to the other, the bus nodes can follow normal bus protocol and provide a response to the initiator unit. Such a response must be appropriate to the bus protocol and will typically be an error message, power down message, isolate message or the like. Accordingly, every request from one side of the partition to the other will automatically receive an error message or the like as a response. An alternative would be for all such responses to be that the target is “busy” but this is not preferred.
An embodiment of the invention will now be described, by way of example only, and with reference to the accompanying figures, in which:
The invention may be embodied in an integrated circuit used in a variety of different devices used for multiple purpose applications. In embodiments, each purpose may be a different service or function provided to an end user, such as telephone, video, audio, Internet access and so on. The preferred embodiment relates to an integrated circuit providing two functions: cable modem and television. The embodying device is a conditional access unit commonly referred to as a “set top box”, that is a device that provides access to broadcast services, such as television, only if various conditions are met.
A wide variety of techniques for broadcast transmission are known in which the broadcast signal is encoded, scrambled or encrypted in some way to allow only authorized recipients to retrieve the original signal. One particular field in which this area has been researched is broadcast television.
The broadcast of television signals in which only permitted or authorized recipients can produce the clear television picture from those signals is known as Conditional Access Television or Pay-TV. In this context, broadcast can include over-air, via satellite, by cable or indeed any appropriate distribution medium in which the same signal content is sent to many recipients. Television signals may be analog signals or digital signals. The term “scrambling” is often used for the process of rendering analog signals unusable until “descrambled”, whereas the terms “encryption” and “decryption” are more often used for digital signals. In either case, the aim is to only allow users that have paid a subscription to descramble/decrypt the signals.
A known system and receiver in which the invention may be embodied is illustrated in
A television signal is broadcast over air in a scrambled form by a security computer 10 and includes a stream of control data describing how the television signal is to be descrambled. The television signals and control data are necessarily the same signal sent to all users. It is not feasible to send the signals uniquely scrambled/encrypted to each recipient as there may be tens of millions of users and this would require tens of millions of times the bandwidth. Accordingly, all recipients operate the same descrambling/decryption process. This is implemented in the decoder 2, which receives the broadcast signals from a receiver 12. A data demodulator 14 extracts the portion of the signal for picture and/or sound and provides this to a descrambler 16 for descrambling. The control data portion is extracted and provided to a verifier 20 over line 15. The control data comprises encrypted control words, which instruct the descrambler how to descramble the picture/sound signal. The control words are therefore decrypted, and it is for this purpose that the smart card 22 is provided.
The verifier 20 provides encrypted control words across an interface along line 21 to the smart card 22. The smart card 22 contains an algorithm, which, if the user is entitled to watch the chosen channel, decrypts the control words and provides them to the verifier 20 via line 23. The verifier passes the decrypted control words to a pseudo-random binary sequence (PRBS) generator 18 over line 19, which in turn provides a descrambling code over line 17 to the descrambler. It should be noted that the control words and hence the descrambling code change frequently (every few seconds). The security in this arrangement is thus that it is not feasible to try and decrypt the control words in real time without the smart card algorithm. Also, in the event that the smart card algorithm is compromised, then the smart cards themselves can be re-issued to all subscribers. Lastly, to view any channels, a user typically pays for “entitlements” which are broadcast over air addressed uniquely to each user and stored in the smart card 22.
The decoder 2 may provide services additional to the descrambling of television signals, such as telephony and cable modem services. As previously explained, this could be implemented by multiple different chips. The preferred embodiment, though, is to implement the functions of the data demodulator 14 and cable modem as a single chip referred to as a “cable modem chip”. The functioning of the television descrambler is dependent, though, on the demodulation of the signal and so the embodiment provides flexible isolation of the demodulation and cable modem functions. In effect, the embodiment of the invention allows the cable modem chip to be logically partitioned into two independent chips. This allows a robust separation of functions and isolates malfunctions in one partition from another. The embodiment of the invention achieves this with minimal hardware over an optimal integrated non-partitionable implementation.
A cable modem chip (integrated circuit) 3 according to one embodiment of the invention is shown in
The cable modem chip 3 is shown in greater detail in
A Docsis2+ protocol unit 36 and a return channel unit 37, also connected to the bus 35, implement the cable modem functions of the circuit 3. The circuit may be connected to external devices by USB interface 38 or Ethernet interface 39. The remainder of the circuit 3 need not be described further and comprises subsystems for memory, CPU and system services.
As can be seen, the bus 35 connects all circuit components, notably connecting between the data demodulator/video system 31 and the remainder of the circuit. The bus 35 is provided with a facility for power management that allows ports to be powered-down such that subsequent access to such ports will be responded to with appropriate errors. The embodiment uses this functionality to provide selective partitioning of the chip. This is achieved by alteration of the functioning of the bus 35 at a chosen point so as to make each side of the bus appear as powered-down to the other side of the bus. Any requests made across this chosen point will thus receive an appropriate error as a response. This approach has the benefit of requiring minimum hardware alteration to a bus, whilst achieving effective logical partitioning.
The partitioning can be seen more clearly in
The configuration of a node is further shown in
The node control logic 50 is responsible for the arbitration of the initiators requests and the generation of the signals used to proper multiplex the protocol signals across the datapath 51. The control logic, shown in
The sub-blocks that an initiator group is composed of are shown in
Notice that the total number of targets is given by the number of external targets connected to the node plus the so called dummy target, a module internal to the node, acting as a target with a pipeline capability of one cell only, used to generate error response packets when errors are detected by the address decoder.
The node has an array of inputs indicating power-down-state, generated by a low-power controller at the system level, each corresponding to a target on the node. The node contains a dummy target, which when accessed only replies with an error response. The address decoder inside the node accepts requests, decodes the address and forwards the address to the appropriate target. The power-down-state signals are connected to the address decoder. If the low-power controller asserts a power-down signal the address decoder will forward any requests to the dummy target, rather than to the desired target.
If an error condition occurs (such as the power down state), the address decoder will generate a request toward the dummy target, responsible to generate an error response packet, marked by a response opcode equal to 0×83, the cycle after the error request has been received. The number of response cells the error response packet is composed of depends on the type of the bus node. Once the addressed target has been detected (provided that the address issued by the initiator is in the correct range), the address decoder has to check that it is not in power down mode and that the attribute security bit is consistent with the target security status. If this is the case the one-hot encoding representing the selected target is propagated to the next stage of the node, otherwise the dummy target will be addressed.
From the foregoing it will be appreciated that, although specific embodiments of the invention have been described herein for purposes of illustration, various modifications may be made without deviating from the spirit and scope of the invention. Accordingly, the invention is not limited except as by the appended claims.
Number | Date | Country | Kind |
---|---|---|---|
06251162 | Mar 2006 | EP | regional |
Number | Name | Date | Kind |
---|---|---|---|
5226125 | Balmer et al. | Jul 1993 | A |
5815647 | Buckland et al. | Sep 1998 | A |
5862404 | Onaga | Jan 1999 | A |
6073195 | Okada | Jun 2000 | A |
6085328 | Klein et al. | Jul 2000 | A |
6622220 | Yoshida et al. | Sep 2003 | B2 |
6754716 | Sharma et al. | Jun 2004 | B1 |
6877061 | Thibault et al. | Apr 2005 | B2 |
6996651 | Garinger et al. | Feb 2006 | B2 |
7062559 | Yoshimura et al. | Jun 2006 | B2 |
7069376 | Mathewson et al. | Jun 2006 | B2 |
7143196 | Rimmer et al. | Nov 2006 | B2 |
7277953 | Wils et al. | Oct 2007 | B2 |
7328298 | Kamakura et al. | Feb 2008 | B2 |
7366784 | Ishizaki | Apr 2008 | B2 |
7502842 | Graham et al. | Mar 2009 | B2 |
7509401 | Takamoto et al. | Mar 2009 | B2 |
7539124 | Rhim et al. | May 2009 | B2 |
7581021 | Errickson et al. | Aug 2009 | B2 |
7633955 | Saraiya et al. | Dec 2009 | B1 |
7733771 | Clermidy et al. | Jun 2010 | B2 |
7752378 | Fukumura et al. | Jul 2010 | B2 |
20020010881 | White | Jan 2002 | A1 |
20040088599 | Matsui et al. | May 2004 | A1 |
20040193906 | Dar et al. | Sep 2004 | A1 |
20040252722 | Wybenga et al. | Dec 2004 | A1 |
20050185642 | Rhim et al. | Aug 2005 | A1 |
20050210333 | Allue et al. | Sep 2005 | A1 |
20050235084 | Nariai | Oct 2005 | A1 |
20060067218 | Clermidy et al. | Mar 2006 | A1 |
20060146857 | Naik et al. | Jul 2006 | A1 |
20090102534 | Schmid et al. | Apr 2009 | A1 |
20090201925 | Rhim et al. | Aug 2009 | A1 |
Number | Date | Country |
---|---|---|
WO 9832291 | Jul 1998 | WO |
Number | Date | Country | |
---|---|---|---|
20070262653 A1 | Nov 2007 | US |