Networked multimedia overlay system

Abstract

Systems and methods are disclosed for providing encrypted downstream signals to a plurality of receiver devices 130, 135, 140, where the devices 130, 135, 140 may have different decryption devices. A receiver network (i.e., a networked multimedia system) includes a splitter/isolation module (SIM) 125, a primary set-top terminal (STT) 130, and at least one remote device 135, 140. The remote devices 135, 140 communicate with the primary STT 130 via the SIM 125 over coaxial cable. Accordingly, the remote devices 135, 140 are capable of requesting and receiving stored programs via the networked multimedia overlay system. Depending upon the decryption device included in the requesting remote STT 135, 140, the primary STT 130 sends a stored program encrypted according to that decryption device.

Description

FIELD OF THE INVENTION

This invention relates in general to broadband communications systems, and more particularly, to the field of set-top terminals and a networked multimedia overlay system.

DESCRIPTION OF THE RELATED ART

Communications systems, such as a cable or satellite broadband system, transmit signals including video, voice, and data to receiving devices. Generally, the signals are encrypted with a proprietary encryption scheme prior to transmitting to avoid theft of the signals. The receiving devices, such as set-top terminals, include a decryption device that then correlates with the transmitting encryption device. Accordingly, it is difficult for operators to switch set-top terminal manufacturers because of the proprietary encryption/decryption scheme. Additionally, if an operator wants to use set-top terminals manufactured by another vendor, there needs to be cooperation between the manufacturers to license one of the decryption schemes to the other vendor depending upon which encryption scheme is used.

The encryption and decryption techniques used for signal encoding and decoding belong to two general classes: symmetrical key techniques and public key techniques. A symmetrical key encryption system is one in which the sending device encrypts the signals using its copy of the key and the receiving device decrypts the signals using its copy of the key. It is well known in the art that the symmetrical key technique is considered a non-persistent method where the keys are routinely changed. A public key encryption system is one in which the sending device and the receiving device each has its own public key-private key pair. Signals encrypted with the public key can only be decrypted with the private key and vice-versa. Thus, as long as a device keeps its private key secret, it can provide its public key to any other device that wishes to communicate with it. The other device simply includes that public key in the encrypted signal, and the receiving device then uses its private key, along with the encrypted public key, to decrypt the signals. The public key technique is considered a non-persistent technique where the keys are not changed and remain the same. Further information regarding encryption and decryption can be found in U.S. Pat. No. 6,292,568, the disclosure and teachings of which are hereby incorporated by reference.

A set-top terminal (STT) is typically connected to a television set and located at the home of the cable or satellite system subscriber. Since the STT is located in the subscriber's premises, it may be used by two or more users (e.g., household members). Television has become so prevalent in the United States, however, that the typical household may have two or more television sets, each television set requiring its own STT if the subscriber wishes to have access to enhanced functionality. However, STTs can be expensive and users may not be willing to purchase additional expensive STTs. This is particularly true of STTs incorporating PVR functionality since such devices require not only the addition of a hard disk drive but also additional processing components and software.

Therefore, there exists a need for systems and methods for addressing these and/or other problems associated with STTs. Specifically, there exists a need for systems and methods that allow multiple operating discrete STTs within a subscriber premises or other local area to have secure access to programming and content received by and/or stored in another STT. Additionally, a need exists for the operator to utilize different manufacturer's STTs that coexist in the subscriber premises.

BRIEF DESCRIPTION OF THE DRAWINGS

The invention can be better understood with reference to the following drawings. The components in the drawings are not necessarily drawn to scale, emphasis instead being placed upon clearly illustrating the principles of the invention. In the drawings, like reference numerals designate corresponding parts throughout the several views.

FIG. 1 illustrates a simplified drawing of a system that transmits signals having a first encryption scheme and a plurality of receiving devices each having either a first decryption scheme or a first and second decryption scheme.

FIG. 2 is a block diagram illustrating one preferred embodiment of a networked multimedia overlay system (NMOS) in accordance with the present invention.

FIG. 3 is a block diagram illustrating the primary STT 130 including a first decryptor device, a first encryptor device, and a critical packet selector for receiving and storing selected programs in accordance with the present invention.

FIG. 4 illustrates the paths of a requested program depending upon the decryption method used in the requesting remote STT in accordance with the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

Preferred embodiments of the invention can be understood in the context of a broadband communications system and a local network. Note, however, that the invention may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. For example, transmitted broadband signals include at least one of video/audio, telephony, data, or Internet Protocol (IP) signals, to name but a few. Furthermore, remote devices included in the broadband communications system receiving the transmitted broadband signals may include a remote set-top terminal, a television, a consumer electronics device such as a DVD player/recorder, a computer, a personal digital assistant (PDA), or other device. All examples given herein, therefore, are intended to be non-limiting and are provided in order to help clarify the description of the invention.

The present invention is directed towards a networked multimedia overlay system (NMOS) that is suitable for use in a broadband communications system. The NMOS is typically located within a subscriber premises. It will be appreciated, however, that the NMOS can also be used in a multi-unit dwelling, business, school, hotel, or hospital, among others. Advantageously, the NMOS allows the premises to be locally networked (i.e., home-networked). In accordance with the present invention a primary set-top terminal (STT) receives and forwards broadband multimedia content signals (e.g., digital or analog cable television channels (i.e., audio/video signals), IP signals, VOD signals, stored presentations, software application signals, administrative signals, etc.) throughout the local network to a plurality of remote set-top terminals (STTs). Additionally, the remote STTs are each capable of requesting from the primary STT and seamlessly receiving, for example, a cable channel, a stored or recorded presentation, a VOD movie, or the interactive program guide, just as if the remote terminals were equipped with the primary STT functionality while also receiving broadband signals directly from the provider. In other words, the remote terminals may be simplified, less-costly versions of the primary STT but are capable of utilizing, via the local network, some or all of the advanced hardware and software features, such as memory, a mass storage device, or software applications, that are available in the primary STT.

Furthermore, the present invention is directed towards an NMOS that includes a primary STT and remote STTs that may have different decryption schemes. FIG. 1 illustrates a simplified drawing of a system that transmits signals having a first encryption scheme and a plurality of receiving devices each having either a first decryption scheme or a first and second decryption scheme. More specifically, a service provider 105 transmits signals that have been encrypted by a first encryptor device 110. The service provider 105 also has a first decryptor device 115 for decrypting any reverse signals that have been encrypted with the first encryption scheme. The encrypted signals are transmitted over a communications network 120 to a plurality of subscribers 125. It will be appreciated that the application addresses only two different encryption/decryption schemes, but that more schemes may exist in the system and is anticipated by the teachings herein. Additionally, only one subscriber 125 is shown for convenience, but there are obviously many subscribers in the network.

In an exemplary embodiment of the present invention, a splitter isolator module (SIM) 125 receives the signals and provides the signals having the first encryption scheme to a plurality of receiving STTs 130, 135, 140. A primary STT 130 includes a decryptor device that decrypts the first encryption scheme and also includes one or more encryptor/decryptor devices that encrypt and decrypt additional encryption schemes. Additionally, one remote STT 135 may have two decryptor devices that each decrypts either the first or the second encryption schemes, and another remote STT 140 may have a decryptor device that decrypts just the first encryption scheme.

It will be appreciated that the content transmitted between the primary and remote STTs 130, 135, 140 should be encrypted so that pirating or theft of the signals can be prevented. Preferably, the encryption should not be a persistent encryption method, which includes expiring keys since there would be a time limit associated with a stored program. It is also possible that a second decryption scheme may be a stronger encryption scheme than the first encryption scheme. In accordance with the present invention, the NMOS operates such that the primary STT 130 provides encrypted signals, such as stored programs, to a requesting remote STT 135, 140 in accordance with the requesting remote STT's decryption capabilities. In other words, if a remote STT 135, 140 has a first and second decryptor device for decrypting either encryption scheme, the primary STT 130 sends the stored content signals encrypted with the second encryption scheme, which preferably is a non-persistent encryption scheme. If, however, a remote STT 135, 140 has only a first decryptor device for decrypting the first encryption scheme, the primary STT 130 sends the stored content signals encrypted with the first encryption scheme. Importantly, the remote STTs that have only the first decryptor device do not have to be replaced or upgraded to receive stored content from the primary STT 130. Additionally, the operator can use at least two different set-top terminal manufacturers in the system.

FIG. 2 is a block diagram illustrating one preferred embodiment of a networked multimedia overlay system (NMOS) 200 in accordance with the present invention. The NMOS 200 includes a master or primary STT 130, a splitter/isolation module (SIM) 125, and a plurality of remote STTs 135, 140. It is to be noted that while the embodiment of FIG. 2 illustrates an NMOS having only two remote devices, the invention is not so limited. Indeed, any number of such remote devices may be employed, consistent with the requirements and capabilities of the NMOS, as described herein. Briefly, the SIM 125 receives downstream broadband signals from, for example, the headend or satellite (i.e, satellite provider) and subsequently provides the downstream signals to the primary STT 130 or to both the primary STT 130 and any one or all of the plurality of remote STTs 135, 140 depending on the implementation.

Upon command, the primary STT 130 may also forward selected real-time downstream signals and/or stored signals to one or all of the remote STTs 135, 140 via the SIM 125. More specifically, the plurality of remote STTs 135, 140 communicates with the primary STT 130 by sending reverse control/command signals via cables 220, 221-n requesting stored presentations or real-time signals. It will be appreciated that wired mediums, such as coaxial, telephone lines, or data cables, may be used so long as the transport format accommodates the desired transmission medium. Advantageously, in accordance with the present invention, the plurality of remote STTs 135, 140 have access to all of the primary STT's hardware and software functionality, along with receiving downstream signals directly from the headend via the SIM 125. In this manner, the remote STTs 135, 140 may have limited functionality, thereby decreasing the overall costs to the service provider and the subscriber while offering advanced services to all of the remote devices that are networked.

Furthermore, the primary STT 130 may also directly provide broadband signals to a coupled local device 225, which may be, for example, a television, computer, or PDA. It will be appreciated that the primary STT 130 may transmit signals to and receive control signals from the local device 225 via wireless devices (e.g., RF or IR devices) or a wired medium (e.g., coaxial cable, power lines, or telephone lines). It will also be appreciated that the primary STT 130 may be incorporated in the local device 225. The primary STT 130 optionally includes, for example, an IR receiver 368 (FIG. 3) for receiving user input control signals (e.g., signals indicating a channel change, IPG display, volume control, or administrative signals) that are encoded in an IR signal. Those of ordinary skill in the art would understand elements and operation of a typical IR receiver 368. Further information regarding the transmitting and receiving of signals between the primary STT and the coupled local device via wireless devices or a wired medium can be found in copending U.S. patent application Ser. No. 10/008,581, the teachings of which are hereby incorporated by reference.

FIG. 2 also includes a simplified, non-limiting block diagram illustrating selected components of the primary STT 130 in accordance with one preferred embodiment of the present invention. In other embodiments, a primary STT 130 may include only some of the components shown, in addition to other components that are not shown in FIG. 2. The primary STT 130 has electronic components (e.g., processor 305, memory 310, etc.) that are coupled to a local interface 315, which can include, for example, one or more buses or other wired or wireless connections. The processor 305 is a hardware device for executing software, particularly that stored in memory 310. The processor 305 can be a custom-made or commercially available processor for executing software instructions. When the primary STT 130 is in operation, the processor 305 is configured to execute software stored within the memory (not shown), to communicate data to and from the memory, and to generally control operations of the primary STT 130 according to the software.

The memory system may include any one or combination of volatile memory elements (e.g., random access memory (RAM), dynamic RAM (DRAM), static RAM (SRAM), synchronous DRAM (SDRAM), magnetic RAM (MRAM), etc.) and nonvolatile memory elements (e.g., read only memory (ROM), hard drive, tape, compact disc ROM (CD-ROM), etc.). Moreover, the memory system may incorporate electronic, magnetic, optical and/or other types of storage multimedia. Note that the memory system can have a distributed architecture, where various memory components are situated remotely from one another, but can be accessed by the processor 305.

The software in memory may include one or more separate programs, each of which comprises executable instructions for implementing logical functions. The software in memory includes an operating system (OS), a WatchTV application, a navigator application, a personal video recorder (PVR)/digital video recorder (DVR) application, a driver, a VOD application, and an IPG application, among others. The OS controls the execution of other software and provides management and control services including, for example, scheduling, input-output control, file and data management, memory management, and communication control. The WatchTV application is used to help provide a user with a requested broadcast television channel. The IPG application provides an interactive program guide that mainly includes listings of television channels provided by the primary STT 130, but may also present additional services, such as an NMOS interactive guide. The navigator application is used to route user input commands to respective software applications that have registered with the navigator application to receive the respective commands. The VOD application provides a user with video-on-demand presentations, such as, for example, movies that are selected via an on-screen movie catalog. The PVR application may provide user interface (UI) screens that can be used to manage (e.g., record, playback, and delete) the content of a storage device 330. Accordingly, the PVR application may record or delete data from the storage device 330 with the help of a software driver, which controls read and write operations performed on the storage device 330. In one preferred embodiment, the storage device 330 includes a hard drive that reads from and writes to a hard disk. It will be appreciated that other software applications may be included in memory.

A tuner system 335 includes, in one implementation, an out-of-band tuner (not shown) for receiving out-of-band signals (e.g., administrative signals that were modulated using quadrature phase shift keying (QPSK)), and a plurality of in-band tuners (e.g., quadrature amplitude modulation (QAM)/analog tuners) for receiving analog and/or digital in-band television channels. Alternatively, the tuner system 335 may only include one in-band tuner depending on a desired implementation. Although shown as one module, the signal processing system may comprise multiple modules that are located in different parts of the primary STT 130. It will be appreciated that in the preferred embodiment of the present invention the number of tuners typically corresponds to at least the optional coupled local device(s) 225 and the storage device 330. Further information regarding adding additional tuners can be found in copending U.S. patent application Ser. No. 10/263,449, which was filed on Oct. 2, 2002, the teachings of which are hereby incorporated by reference.

The primary STT 130 receives via the SIM 125 downstream broadband signals (i.e., signals that are typically in a frequency range from 45 MHz to 870 MHz). A low pass filter in diplex filter 235 provides the downstream signals to the tuner system 335 and the remote device command receiver 285. Upon command from the processor 305, the tuner system 335 may send the downstream signals to any local devices 225, the storage device 330 for optional storage, and additionally to a modulator 240. More specifically, the processor 305 instructs the tuner system 335 to extract specified content signals from the downstream signals. By way of example, a tuner 340 responsive to the coupled local device 225 provides selected content signals directly to the local device 225. The tuner system 335 that is responsive to the remote STTs 135, 140 via the processor 305 may forward selected real-time presentations directly to the modulator 240 for transmission to the plurality of remote STTs 135, 140. Furthermore, upon user input from the primary STT 130 or any one of the remote STTs 135, 140, the processor 305 may instruct the tuner system 335 to provide content presentations to the storage device 330 for storage. The stored presentations are subsequently available for forwarding to any of the remote STTs 135, 140 and/or the local device 255 upon instruction from the processor 305. User input signals will be discussed in further detail hereinbelow relating with a preferred embodiment of the remote STTs 135, 140.

In accordance with the present invention, the modulator 240 modulates the selected content signals (i.e., NMOS presentations) provided from either the tuner system 335 or the storage device 330 prior to forwarding to the SIM 125. For example, a preferred embodiment of the present invention uses a QAM modulator, which may be used for effectively transmitting signals over coaxial cable in a cable television environment. Other embodiments may include a QPSK modulator in a satellite environment, an 8VSB (8-vestigial sideband) modulator in a digital terrestrial environment in the U.S., and a COFDM (coded orthogonal frequency division multiplexing) modulator in a digital terrestrial environment in Europe, or alternatively an analog modulator. The modulator 240 converts the signals to a predetermined intermediate frequency. Subsequently, the modulated presentations are up-converted to a predetermined higher frequency that is preferably greater than the highest frequency used in the system with, for example, a UHF converter 245. A preferred embodiment of the present invention is to up-convert the NMOS presentations to an available high frequency channel, for example, channel 134, which may have a frequency range from 852 MHz to 858 MHz. The service provider, therefore, would provide downstream signals in the range from 45 MHz to approximately 840 MHz, thereby leaving frequencies greater than 840 MHz available for the transmission of NMOS presentations. Accordingly, the NMOS presentations 405 do not interfere with the downstream signals that may be concurrently provided via the common cables 220, 221-n to the primary STT 130 and the remote STTs 135, 140. It will be appreciated that other frequency ranges can be used that are either in-band (e.g., from 45 MHz to 860 MHz) or out-of-band (e.g., from 865 MHz to 1 GHz) so long as the predetermined frequency range is not used for transmission of the downstream signals or is within the range that is tunable by the plurality of remote STTs 135, 140. The up-converted NMS presentations are subsequently provided to the SIM 125 via a high pass filter in the diplex filter 235.

Furthermore, the remote device command receiver 285 is included in the primary STT 205 for receiving reverse NMOS command signals from the plurality of remote STTs 135, 140. Command signals can be transmitted in the form of on-off keying (OOK) signals, frequency shift keying (FSK) signals, or serial data transmissions. Additionally, command signals can be transmitted from the remote STTs 135, 140 as IP signals to the service provider. The signals would include the primary STT 130 address in the NMOS, and the service provider then routes the IP signals to the primary STT 130. The remote device command receiver 285, therefore, includes the respective demodulator, such as an OOK demodulator or an FSK demodulator that demodulates the signals as known to one skilled in the art.

The selected NMOS presentations are provided by the primary STT 130 to the SIM 125 via the cable 220. In a first embodiment of the SIM 125, the selected NMOS presentations are routed to the plurality of remote STTs via a diplex filter 250. A splitter 266 provides the NMOS presentations to high pass filter (HPF) 255, which subsequently provides the filtered NMS presentations to splitter 267, diplex filter 260, and splitter 265. The HPF 255 has low attenuation at the frequencies of the NMOS presentation and high isolation at lower frequencies, and, thus, provides high isolation between port 268 and ports 269-n at these lower frequencies. It will be appreciated that a bandpass filter (BPF) can alternatively be used depending on the transmission frequencies of the NMS presentations. Splitter 265 provides the NMS presentations to the plurality of remote STTs 135, 140. It will be appreciated that, at the frequencies of the NMOS presentations, splitters 266 and 267 provide low insertion loss between port 268 and the splitter 265, thereby ensuring the NMOS presentations are routed to the plurality of remote STTs. Additionally, in an active SIM 125, the amplifier 275 further prevents the NMOS presentations from reaching the CN 120.

Moreover, diplex filters 250 and 270 provide a path for upstream signals from the primary STT 130 to the service provider. Similarly, diplex filters 260 and 270 provide a path for upstream signals from the plurality of remote STTs 135, 140 to the service provider. A high pass filter 271 allows any upstream signals (e.g., signals ranging from 5 MHz to 45 MHz) to pass through to the diplex filter 270 on to the CN 120. It will be appreciated that the reverse signals intended to remain in the NMOS 200, such as reverse command signals from the remote STTs 135, 140, are reflected back and routed to the primary STT 130. Furthermore, the SIM 125 receives the downstream broadband signals from the service provider 105 at diplex filter 270, which provides the downstream signals to the primary STT 130 or, alternatively, to both the primary STT 130 and the plurality of remote STTs 135, 140.

Notably, the preferred embodiments of the SIM 125 provide protection against any of the reverse command signals from leaving the NMOS 200, thereby ensuring proper delivery to the primary STT 130 while also avoiding any interference with separate networked multimedia systems that may be in close proximity. A further advantage is that the SIM 125 enhances privacy and security by making the NMOS 200 unobservable to any upstream devices in the CN 120.

It will be appreciated that the remote STTs 135, 140 may be identical to the primary STT 130 and just share the storage device contents of the primary STT 130. Alternatively, the remote STTs 135, 140 may be a simplified or conventional version of the primary STT 130. A processor 305 and a tuner system 335, which may be a simplified processor and only one tuner, may be included to extract channels from the received downstream broadband signals. Additionally, decryptors and decoders may be included to decode encoded signals for proper processing and display. Furthermore, the remote STTs 135, 140 may or may not include memory for storage of presentations. Preferably, the remote STTs 135, 140 include a user input receiver, such as an IR receiver or an RF receiver, that receives signals from a remote control, such as an IR remote control or an RF remote control. It will be appreciated that the remote control is not required, and any user input device could be incorporated in the remote STTs 135, 140.

FIG. 3 is a block-diagram illustrating the primary STT 130 including a first decryptor device 305, a second encryptor device 310, and a critical packet selector 315 for receiving and storing selected programs in accordance with the present invention. A first decryptor device 305 receives the incoming signals that have been encrypted by the first encryption scheme via the first encryptor device 110 (FIG. 1) and decrypts the signals. The decrypted stream (i.e., 100% of the clear stream) is provided to a buffer 320. Additionally, the incoming signals are provided to a second buffer 325. A packet comparator 328 compares the packets in the buffered streams to ensure they are aligned due to any delays introduced by the decryptor device 305. The critical packet selector 315 uses the clear stream 345 as a reference stream and controls switch 335. More specifically, switch 335 allows the packets of buffered stream 350 to drop until a critical packet is detected in the clear stream 345. When a critical packet is detected, switch 335 provides the packet of buffered encrypted stream 350 to the hard drive 330 for storage. It will be appreciated that the stored packets of the buffered stream 350 are still encrypted by the first encryption scheme. The clear stream 345, including all critical packets, is encrypted by the second encryptor device 310, where the second encryptor device 310 has a second encryption scheme that uses a non-persistent technique, such as 3DES, AES Mutli-2, or DVB-CSA, and subsequently provides the second encrypted stream to the hard drive 330 for storage.

In accordance with the present invention, 100% of the second encrypted program is stored along with a percentage, such as from 2% to 6%, of the selected packets of the first encrypted program for each program. The second encrypted program and the first encrypted packets are indexed in a table for later retrieval. The indexing can use, for example, Moving Pictures Experts Group (MPEG) header information or program identification (PID) numbers along with time stamps. When a user using a remote STT 135, 140 desires to view a program that has been stored on the primary STT hard drive 330, a signal is sent to the primary STT 130. The signal is indicative of the desired program as well as the particular requesting remote STT 135. Referring again to FIG. 2, the remote device communication receiver 285 receives the signal, and the processor 305 determines the storage location of the program in the hard drive 330. Additionally, the processor 305 determines based on predefined characteristics whether the requesting remote STT 135, 140 includes just the first decryptor device or both the first and the second decryptor devices.

FIG. 4 illustrates the paths of a requested program depending upon the decryption method used in the requesting remote STT 135, 140 in accordance with the present invention. In the case where the remote STT 135, 140 includes the second decryptor device, the processor sends a copy of the program that was encrypted in the second encryption scheme directly to the modulator 240. The remote STT 135, 140 then decrypts the program using its second decryptor device, which uses a public key-private key technique (i.e., a non-persistent technique).

If, on the other hand, the remote STT 135, 140 includes only the first decryptor device, the processor 305 accesses the second encrypted stored program and sends it to a second decryptor device 405 in the primary STT 130. After decryption, the clear stored program is delayed in buffer 410. Additionally, the processor 305 accesses the percentage of the selected critical packets of the first encrypted program and sends them to buffer 415. A second critical packet selector 420 monitors the clear stream allowing the clear stream to pass through to a combiner 435 until the critical packet is detected. At that point, the critical packet selector 420 controls switch 425 and allows that clear packet to drop. Concurrently, the encrypted critical packet received from buffer 415 passes through to the combiner 435. The combiner 435 combines the clear stream and the first encrypted packets depending upon header information and time stamps, for example, ensuring that they are properly aligned. More specifically, the combined stream includes a percentage of clear packets and the first encrypted critical packets providing a partially encrypted stream. Further information on packet alignment can be found in copending U.S. patent application Ser. No. 10/629,839 filed Jul. 30, 2003, the teachings of which are hereby incorporated by reference. Additionally, a packet comparator, such as the packet comparator in FIG. 3, can be used to ensure that the clear stream and the first encrypted critical packets are aligned correctly leaving the buffers 410, 415. The combined stream is then provided to the modulator 240 and subsequently to the requesting remote STT 135, 140.

It should be emphasized that the above-described embodiments of the invention are merely possible examples, among others, of the implementations, setting forth a clear understanding of the principles of the invention. Many variations and modifications may be made to the above-described embodiments of the invention without departing substantially from the principles of the invention. All such modifications and variations are intended to be included herein within the scope of the disclosure and invention and protected by the following claims. In addition, the scope of the invention includes embodying the functionality of the preferred embodiments of the invention in logic embodied in hardware and/or software-configured mediums.

Claims

1. A method for providing a networked overlay system, the method comprising the steps of: receiving downstream signals encrypted according to a first encryption scheme at a primary device and a plurality of remote devices, the downstream signals including a plurality of programs;in the primary device, decrypting at least one of the plurality of programs to provide a clear program;encrypting the clear program according to a second encryption scheme to provide a second encrypted program;storing the second encrypted program;concurrently storing a portion of the at least one program encrypted according to the first encryption scheme by: buffering the clear program, the clear program having packets;buffering the at least one program encrypted according to the first encryption scheme, the at least one program having packets;detecting at least one predetermined critical packet in the clear program;wherein packets of the clear program are dropped until such time as the at least one predetermined critical packet is identified, wherein a corresponding critical packet in the at least one program encrypted according to the first encryption scheme that is in accordance with the predetermined critical packet is stored;in response to a requesting remote device for a stored program,determining the decryption device of the requesting remote device;dependent upon the decryption device, accessing the stored program,wherein if the decryption device is capable of decrypting programs encrypted according to the second encryption scheme, providing the stored second encrypted program to the requesting remote device;wherein if the decryption device is capable of decrypting programs encrypted according to the first encryption scheme but not the second encryption scheme, providing the stored second encrypted program to a second decryptor device;decrypting the stored second encrypted program to provide a clear program;buffering the clear program;concurrently buffering the at least one corresponding critical packet in the at least one program encrypted according to the first encryption scheme;detecting the at least one predetermined critical packet in the clear program;wherein packets of the clear program are passed through until such time as the at least one predetermined critical packet is detected and the at least one predetermined critical packet is dropped from the program;combining the passed clear program packets with the buffered at least one corresponding critical packet encrypted according to the first encryption scheme to provide a partially encrypted program; andproviding the partially encrypted program to the requesting remote device.

2. The method of claim 1, further comprising the step of modulating the requested stored program to a predetermined frequency.

3. The method of claim 1, further comprising the step of modulating the second encrypted program or the partially encrypted program to a predetermined frequency.