abstract |
A hybrid method for a service provider (10) to transmit decryption information (e.g., algorithms, parameter, keys) to clients (12) in a secure manner and at low cost for use in decrypting broadcast services. The service provider (10) uses a bi-directional channel (14) (e.g., a GPRS channel) to receive service requests, authenticate clients and transmit currently valid decryption information (and, optionally, future decryption information) necessary to decrypt a broadcast service. The service provider (10) transmits the encrypted service on a unidirectional channel (16) (e.g., a DVB-T channel). The service provider (10) preferably also changes the encryption of the service with time, and, as it does, transmits updated decryption information to its clients (12) on the unidirectional channel (16). The updated decryption information is encrypted using the currently valid decryption information and may also include future decryption information and synchronization information. |