BACKGROUND OF THE INVENTION The IEEE 1394 high-speed serial bus provides enhanced PC connectivity for consumer electronics audio/video (A/V) appliances, storage peripherals, other PCs, and portable devices, making it possible to transfer content quickly and efficiently around such devices. An industry developed standard, DTCP (5C) copy protection scheme (Digital Transmission Content Protection Specification, Vol. 1, available at www. dtcp. com/infodtcpvl. pdf), provides content protection against the unauthorized copying and transmission of digital images and sound. DTCP was developed to encrypt digital content as it moves over an IEEE 1394 interface from pay television systems like cable and satellite.

The DTCP scheme supports capabilities such as moving copies from personal video recorders to removable digital tape or disc recordings, and transferring copies among servers located in different places in a home. DTCP technology includes three basic copy control states, designated Copy Freely, Copy One Generation, and Copy Never, any of which can be applied to particular items of content. The DTCP system thus enables generations of control information, where the copy control state of data in a particular location directly affects the next generation copy control state, dependant on the particular copy control in use for the first generation.

In general, pay television systems, as well as MPEG (ISO/IEC JTC1/SC29/WG11)/DVD have been designed to protect content, while controlling the transport stream and delivering clear uncompressed content for display. (DVD specifications are available on the Internet at ecma. ch. Specific specifications include ECMA-267 (97) 120 mm DVD-Read-Only Disk ; ECMA-

268 (97) 80 mm DVD-Read-Only Disk; and ECMA-272 (99) 120 DVD Rewriteable Disk (DVD-RAM) also published as ISO-IEC 16824).

Digital data is particularly valuable in its clear compressed format, as clear compressed digital data can easily be transmitted because of its size.

Additionally, every copy of clear compressed digital data is identical. End to end content protection has shown the importance of maintaining the data encrypted until it is being used; see, for example, the discussion in NDS marketing white paper XTV Persistent End-to-End Content Protection (30 July, 2002 publication number XT-M164).

When encrypted video has been decrypted, it still cannot be used until it has been decompressed and decoded. However, other data types are used in the format derived by decryption, with no further processing. For example, related but not limited to television programming, interactive data and metadata (for example program titles) typically require no further processing after decryption.

As a result, by"pretending"that video data is not video, it may be possible to fool a system into delivering video in clear compressed format. The video data can then be disseminated rapidly, bypassing all content protection and conditional access schemes.

Throughout the present specification, various encryption algorithms are referred to. Information on the encryption algorithms referred to can be found in Bruce Schneier, Applied Cryptography, second edition, 1996, John Wiley and Sons; and in Alfred J. Menezes, Paul C. van Oorschot, and Scott A. Vanstone, A Handbook of Applied Cryptography, 1997, CRC Press.

The disclosures of all references mentioned above and throughout the present specification are hereby incorporated herein by reference.

SUMMARY OF THE INVENTION Given the shortcomings of the prior art as described above, it is desirable to provide a mechanism that controls whether scrambled compressed content can be used: in clear compressed format ; or only after decoding.

The present invention, in preferred embodiments thereof, seeks to provide an improved mechanism whereby additional security features are added to a video processor. Preferably, the additional security features include headend control which explicitly determines whether the content can be output clear compressed or not. The headend control is enforced in preferred embodiments of the present invention by providing content which is protected by additional encryption and by utilizing an additional decryption element that is only accessible when preparing clear uncompressed content.

The term"headend"is used throughout the present specification and claims to include any hardware and software used to prepare digital data for distribution; such preparation typically includes encrypting, compressing and multiplexing the digital data.

The term"data"is used throughout the present specification and claims to include one or more of the following: video; audio; teletext; interactive applications ; and metadata. Metadata typically includes one or more of the following : program specific information; service information ; electronic program guide information; or any other metadata which might be included in a broadcast stream.

The term"clear"is used throughout the present specification to refer to a state of data which is neither scrambled nor encrypted. For example, and without limiting the generality of the foregoing, the term"clear compressed data" refers to compressed data which is neither scrambled nor encrypted.

The term"render"is used, in all of its grammatical forms, throughout the present specification and claims to refer to any appropriate mechanism or method of making content palpable to one or more of the senses. In particular and without limiting the generality of the foregoing,"render"refers not only to display of video content but also to playback of audio content.

The term"null compression"is used throughout the present specification and claims to mean not compressed.

There is thus provided in accordance with a preferred embodiment of the present invention a method for protecting digital content including receiving compressed encrypted digital content, determining an output format based, at least in part, on all of the following a user-requested output format, received control information, and a rule determining whether a clear compressed output format is allowed, and producing output from the compressed digital content based on a result of the determining, wherein, if the rule does not allow clear compressed output format, the compressed encrypted digital content is provided in a form which prevents production of clear compressed output in the producing step.

Further in accordance with a preferred embodiment of the present invention the form which prevents production of clear compressed output includes compressed encrypted digital content, additionally encrypted in accordance with a second encryption method, and the producing includes decrypting in accordance with the second encryption method, and decompressing, and the producing includes an atomic operation.

Still further in accordance with a preferred embodiment of the present invention the method includes providing an output-producing hardware device, wherein at least the producing is performed in the hardware device.

Additionally in accordance with a preferred embodiment of the present invention the hardware device is characterized by a device profile, and the determining is also based, at least in part, on the device profile.

Moreover in accordance with a preferred embodiment of the present invention the determining is also performed in the hardware device.

Further in accordance with a preferred embodiment of the present invention the hardware device is included in a single integrated circuit.

Still further in accordance with a preferred embodiment of the present invention the integrated circuit is included in a smart card.

Additionally in accordance with a preferred embodiment of the present invention the method includes rendering the output sensible to at least one human sense.

Moreover in accordance with a preferred embodiment of the present invention the rendering includes at least one of the following: audio rendering; visual rendering; and audio/visual rendering.

Further in accordance with a preferred embodiment of the present invention the compression includes null compression.

Still further in accordance with a preferred embodiment of the present invention local scrambling is applied to the content.

Additionally in accordance with a preferred embodiment of the present invention no output is produced.

There is also provided in accordance with another preferred embodiment of the present invention apparatus for protecting digital content including a digital content receiver receiving compressed encrypted digital content, an output format determination unit determining an output format based, at least in part, on all of the following : a user-requested output format ; received control information; and a rule determining whether a clear compressed output format is allowed, and a content output unit producing output from the compressed digital content based on a result produced by the output format determination unit, wherein, if the rule does not allow clear compressed output format, the compressed encrypted digital content is provided to the digital content receiver in a form which prevents production of clear compressed output by the content output unit.

Further in accordance with a preferred embodiment of the present invention the form which prevents production of clear compressed output includes compressed encrypted digital content, additionally encrypted in accordance with a second encryption method, and the content output unit includes a decrypting unit decrypting in accordance with the second encryption method, and decompressing apparatus, and the content output unit produces output in an atomic operation.

Still further in accordance with a preferred embodiment of the present invention the apparatus includes an output-producing hardware device, wherein at least the content output unit is included in the hardware device.

Additionally in accordance with a preferred embodiment of the present invention the hardware device is characterized by a device profile, and the

output format determination unit determines the output format based, at least in part, on the device profile.

Moreover in accordance with a preferred embodiment of the present invention the output format determination unit is also included in the hardware device.

Further in accordance with a preferred embodiment of the present invention the hardware device is included in a single integrated circuit.

Still further in accordance with a preferred embodiment of the present invention the integrated circuit is included in a smart card.

Additionally in accordance with a preferred embodiment of the present invention the apparatus includes a rendering device which renders the output sensible to at least one human sense.

Moreover in accordance with a preferred embodiment of the present invention the rendering device includes at least one of the following : an audio rendering device ; a visual rendering device; and an audio/visual rendering device.

Further in accordance with a preferred embodiment of the present invention the compression includes null compression.

Still further in accordance with a preferred embodiment of the present invention local compression is applied to the content.

Additionally in accordance with a preferred embodiment of the present invention no output is produced.

There is also provided in accordance with yet another preferred embodiment of the present invention a digital content receiver (DCR) including: a local scrambling descrambler ; a broadcast descrambler receiving an output produced by the local scrambling descrambler; a local scrambler; a combined extra encryption algorithm decryptor and decoder/decompressor (XDDC), and a switch operative to provide an output of the broadcast descrambler to exactly one of the local scrambler and the XDDC, wherein the DCR is operative to receive control information and compressed encrypted digital content, and at least the setting of the switch is determined, at least in part, by the control information, and the DCR is operative to produce an output based on all of the following: the

compressed digital content; a user-requested output format; the received control information; and a rule determining whether a clear compressed output format is allowed, and if the rule does not allow clear compressed output format, the compressed encrypted digital content is provided to the DCR in a form which prevents production of clear compressed output as the output of the DCR.

Further in accordance with a preferred embodiment of the present invention the local scrambling descrambler is operative to perform exactly one of the following operations based, at least in part, on the received control information: receive an input and produce an output substantially identical to the received input; and receive an input, and perform descrambling on the received input, thereby producing an output.

Still further in accordance with a preferred embodiment of the present invention the local scrambler is operative to perform exactly one of the following operations based, at least in part, on the received control information receive an input and produce an output substantially identical to the received input, and receive an input and perform local scrambling on the received input, thereby producing an output.

Additionally in accordance with a preferred embodiment of the present invention the DCR includes an output-producing hardware device, wherein at least the content output unit is included in the hardware device.

Moreover in accordance with a preferred embodiment of the present invention the hardware device is included in a single integrated circuit.

Further in accordance with a preferred embodiment of the present invention the integrated circuit is included in a smart card.

Still further in accordance with a preferred embodiment of the present invention the DCR includes a rendering device which renders the output sensible to at least one human sense.

Additionally in accordance with a preferred embodiment of the present invention the rendering device includes at least one of the following an audio rendering device, a visual rendering device, and an audio/visual rendering device.

Moreover in accordance with a preferred embodiment of the present invention the XDDC is operative, based, at least in part, on the received control information, to receive an input, and descramble and decode the received input in an atomic operation, thereby producing an output.

There is also provided in accordance with yet another preferred embodiment of the present invention a content-protected personal video recorder (PVR) including a DCR, and a PVR unit including PVR storage media, the PVR unit receiving the output produced by the DCR.

Further in accordance with a preferred embodiment of the present invention the PVR unit is operative to store the received output on the PVR storage media.

Still further in accordance with a preferred embodiment of the present invention the output produced by the DCR includes locally scrambled output.

Additionally in accordance with a preferred embodiment of the present invention the PVR unit is operative to retrieve the stored output from the PVR storage media.

Moreover in accordance with a preferred embodiment of the present invention the output retrieved by the PVR includes locally scrambled output.

Further in accordance with a preferred embodiment of the present invention the DCR performs at least one of the following on the locally scrambled output retrieved by the PVR decryption, and decompression.

Still further in accordance with a preferred embodiment of the present invention the PVR unit is operative to store received XEA encrypted output on the PVR storage media.

Additionally in accordance with a preferred embodiment of the present invention the output produced by the DCR includes XEA encrypted output.

Moreover in accordance with a preferred embodiment of the present invention the PVR unit is operative to retrieve the stored XEA encrypted output from the PVR storage media.

Further in accordance with a preferred embodiment of the present invention the output retrieved by the PVR includes XEA encrypted output.

Still further in accordance with a preferred embodiment of the present invention the DCR performs, as an atomic operation, decryption and decompression on the XEA encrypted output retrieved by the PVR.

There is also provided in accordance with yet another preferred embodiment of the present invention a content-protected television system including a DCR, and a television unit, the television unit receiving the output produced by the DCR.

Further in accordance with a preferred embodiment of the present invention the television unit includes an analog television unit.

Still further in accordance with a preferred embodiment of the present invention the television unit includes a digital television unit.

BRIEF DESCRIPTION OF THE DRAWINGS The present invention will be understood and appreciated more fully from the following detailed description, taken in conjunction with the drawings in which: Fig. 1 is a generalized block diagram illustration of a clear compressed content control system constructed and operative in accordance with a preferred embodiment of the present invention; Fig. 2A is a generalized block diagram illustration of a system for producing scrambled compressed digital content, useful for understanding the operation of the system of Fig. 1; Fig. 2B is a generalized block diagram illustration of an alternative system for producing scrambled compressed digital content, useful for understanding the operation of the system of Fig. 1 ; Fig. 3 is a generalized block diagram illustration of a preferred implementation of the system of Fig. 1, illustrating an implementation in which output is stored in a PVR ; - Fig. 4 is a generalized block diagram illustration of an alternative preferred implementation of the system of Fig. 1, illustrating an implementation in which output comprises compressed content ; Fig. 5 is a generalized block diagram illustration of another alternative preferred implementation of the system of Fig. 1, illustrating an implementation in which output is displayed on an analog television; Fig. 6A is a generalized block diagram illustration of yet another alternative preferred implementation of the system of Fig. 1, illustrating an implementation in which output is not useable; Fig. 6B is a generalized block diagram illustration of a preferred embodiment of control information, useful for understanding Fig. 6A; Fig. 7 is a generalized block diagram illustration of another alternative preferred implementation of the system of Fig. 1, illustrating an implementation in which output is displayed on a digital television;

Fig. 8 is a generalized block diagram illustration of yet another alternative preferred implementation of the system of Fig. 1, illustrating another implementation in which output is stored in a PVR; Fig. 9 is a generalized block diagram illustration of still another alternative preferred implementation of the system of Fig. 1, illustrating another implementation in which output is displayed on a digital television; Fig. 10 is a generalized block diagram illustration of another alternative preferred implementation of the system of Fig. 1, illustrating another implementation in which output is displayed on an analog television; Fig. 11 is a generalized block diagram illustration of a mode of operation of the system of Fig. 1, illustrating a mode in which compressed encrypted content is output; Fig. 12 is a generalized block diagram illustration of an alternative mode of operation of the system of Fig. 1, illustrating a mode in which clear uncompressed content is output; Fig. 13 is a generalized block diagram illustration of an alternative mode of operation of the system of Fig. 1, illustrating a mode in which clear compressed content is output; Fig. 14 is a generalized block diagram illustration of an yet another alternative mode of operation of the system of Fig. 1, illustrating a mode in which no output is to be produced; Fig. 15 is a generalized block diagram illustration of an still another alternative mode of operation of the system of Fig. 1, illustrating a mode in which clear compressed content is attempted to be output but no output is allowed; and Fig. 16 is a simplified flowchart illustration of a preferred method of operation of the system of Fig. 1.

DETAILED DESCRIPTION OF A PREFERRED EMBODIMENT Reference is now made to Fig. 1, which is a generalized block diagram illustration of a clear compressed content control system constructed and operative in accordance with a preferred embodiment of the present invention.

The system of Fig. 1 comprises a digital content receiver (DCR) 5.

The DCR 5 is preferably operative to receive scrambled compressed digital content and to produce therefrom one or more types of output in accordance with content control rules, as will be described in more detail below. Persons skilled in the art will appreciate that the DCR 5 may comprise a single integrated circuit.

Persons skilled in the art will further appreciate that the circuit described in this specification need not be embedded in fixed hardware; rather, all or part of the circuit described may be embedded in a removable security element, such as a smart card.

Reference is now additionally made to Fig. 2A, which is a generalized block diagram illustration of a system for producing scrambled compressed digital content, useful for understanding operation of the system of Fig. 1. The system of Fig. 2A is provided by way of example only and is not meant to be limiting.

In the system illustrated in Fig. 2A, clear content 109 typically comprising clear digital content, is input. A compression device 20 compresses the clear content 10, using any appropriate compression method, such as MPEG-2 or MPEG-4, as is well known in the art, to produce compressed clear digital content 30.

The compressed clear digital content 30 is input to a broadcast scrambler 40, which, using encryption methods known in the art, produces therefrom scrambled compressed digital content 50. Non-limiting examples of such encryption methods include DVB (refer to standard ETSI EN 301 192), DES, and 3DES (both DES and 3DES are described in Applied Cryptography, referred to above, at pp. 265-301).

Reference is now additionally made to Fig. 2B, which is a generalized block diagram illustration of an alternative system for producing scrambled compressed digital content, useful for understanding operation of the

system of Fig. 1. The system of Fig. 2B is provided by way of example only and is not meant to be limiting.

The system of Fig. 2B is preferably similar to the system of Fig. 2A, and additionally comprises apparatus for implementing an"extra"encryption algorithm (XEA). Nonlimiting examples of encryption schemes usable for XEA, which schemes are well known in the art, preferably include Diffie-Hellman (described in Applied Cryptography, referred to above, at pp. 513-516) and El- Gamal (refer to Applied Cryptoraphy pgs. 532-533).

In the system illustrated in Fig. 2B, clear content 10, typically comprising clear digital content, is received : A compression device 20 compresses the clear content 10, using any appropriate compression method, as is well known in the art, to produce compressed clear digital content 30.

The compressed clear digital content 30 is received by an XEA scrambler 2409 which produces therefrom XEA scrambled compressed digital content 230.

The XEA scrambled compressed digital content 230 is input to the broadcast scrambler 40. The broadcast scrambler 40 produces therefrom broadcast scrambled XEA scrambled compressed digital content 250 using encryption methods similar to those described above with reference to Fig. 2A.

Referring back to Fig. 1, the DCR 5 preferably comprises the following components, each of which is typically implemented in either hardware, software, or a combination thereof : 1. A descrambler, shown in Fig. 1 by way of example only as a local scrambling descrambler 100. It is appreciated that the type of descrambler 100 provided in the system of Fig. 1 is chosen to correspond to a type of scrambling used to scramble content intended for the DCR 5. Examples of local scrambling would include, but not be limited to, such well known algorithms as AES (FIPS-197, described in csrc. nist. gov/publications/fips/fipsl97/fips-197. pdf), skipjack (FIPS-185, described in csrc. nist. gov/encryption/skipjack/skipjack. pdf), blowfish (described in Applied Cryptography, referred to above, at pp. 336-339), RC5 (described in Applied Cryptography, referred to above, at pp. 344-346), IDEA (described in Applied CryptographY, referred to above, at pp. 319-325),

two fish (described on the Internet at www. counterpane. com/twofish. html), DEAL (described on the Internet at www. ii. uib. no/~lasr/newblock. html), RC6 (described on the Internet at theory. lcs. mit. edu/~rivest/rc6. ps), serpent (described on the Internet at www. cl. cam. ac. uk/al4/serpent. html), RC4 (described in Applied Cryptography, referred to above, at pp. 397-398), and SEAL (described in Applied Cryptography, referred to above, at pp. 398-400).

2. A broadcast descrambler 110, which is preferably operatively associated with the local scrambling descrambler 100. The broadcast descrambler 110 is preferably operative to receive the output produced by the local scrambling descrambler 100 and to perform broadcast descrambling thereon.

3. A local scrambler 120, which is preferably operatively associated with the broadcast descrambler 110 via a switch 140. When the switch 140 is set to send output from the broadcast descrambler 110 to the local scrambler 120, the local scrambler 120 is preferably operative to receive said output and to perform local scrambling thereon. It is appreciated that, depending on the information in the control information 160, the local scrambler 120 may alternatively take no scrambling action; in such a case the local scrambler 120 preferably produces output substantially identical to the input received by the local scrambler 120.

4. A combined XEA decryptor and decode/decompressor (XDDC) 130, which is also preferably operatively associated with the broadcast descrambler 110 via the switch 140. When the switch 140 is set to send output from the broadcast descrambler 110 to the XDDC 130, the XDDC 130 is preferably operative to receive said output and to perform both XEA decryption and decoding/decompression thereon.

The attribute of operations being able to be performed only together, and not separately, is referred to in the present specification and claims as an "atomic operation".

For example, decryption and decoding/decompression in the XDDC 130 comprise an atomic operation. The XDDC 130 is designed in such a way that the XDDC 130 must perform decoding and decompressing together. The XDDC 130 will not perform decoding alone, nor will the XDDC perform

decompressing alone. Anti-tamper techniques, which are well known in the art, are preferably used to ensure the integrity of the XDDC 130.

The term"XEA", as used throughout the present specification and claims refers to any appropriate encryption scheme. Nonlimiting examples of encryption schemes usable for XEA might preferably include Diffie-Hellman and El-Gamal. The key (also referred to herein as a"control word") for XEA is preferably provided by a conditional access system broadcasting an entitlement control message, as is known in the art. A device (not shown in Fig. 1) such as a set-top box or PVR, in which the DCR 5 may preferably be comprised, receives the entitlement control message. Using techniques known in the art, the device (not shown in Fig. 1) derives the control word from the entitlement control message and provides the control word to the DCR 5.

5. A plurality of switches, shown in Fig. 1 as the first switch 140 and the second switch 150 described above. As will be described in more detail below, the plurality of switches preferably also includes other switches (not shown in Fig. 1). Each of the plurality of switches is preferably set in accordance with control information 160 received by the DCR 5. The control information 160 is preferably determined, at least in part, by an owner or controller (not shown) of digital content (not shown in Fig. 1) sent to the DCR 5. In some preferred embodiments of the present invention, the control information 160 is also preferably determined, at least in part, based on input of a user of the DCR 5, requesting to make use of the digital content in a particular way. In some preferred embodiments of the present invention, the control information 160 is also preferably determined, at least in part, based on receiver policy. The control information 160 and the manner in which the plurality of switches are preferably set are described in more detail below.

It is appreciated that, depending on the information contained in the control information 160 and the scrambling state of the content, each of the local scrambling descrambler 100; the broadcast descrambler 110; the local scrambler 120; and the XDDC 130 in the system of Fig. 1 may be either preferably operational or non-operational. For example, and without limiting the generality of the foregoing, the local scrambling descrambler 100 may or may not perform local

scrambling descrambling. Another non-limiting example would be that the local scrambler 120 may or may not perform local scrambling. It is appreciated that if any one or more of the local scrambling descrambler 100; the broadcast descrambler 110; the local scrambler 120; and the XDDC 130 are non-operational, data input into the non-operational element would be passed substantially unchanged as the output thereof.

Persons skilled in the art will appreciate that the DCR 5 also preferably comprises other components (not shown), which typically comprise conventional components well known in the art of content receivers. Non-limiting examples of such components include tuners, demultiplexers, and digital-to-analog converters.

The operation of the system of Fig. 1 is now briefly described.

Various modes of operation of the system of Fig. 1 are determined based on the control information 160 received by the DCR 5. Preferably, upon receiving a new item of digital content, the first switch 140 is set to 0 and the second switch 150 is set to 1, preventing any output from being produced by the DCR 5; this is intended to guarantee that output based on any particular item of digital content is controlled only on the basis of control information 160 associated with that item of digital content.

Persons skilled in the art will appreciate, as discussed above, that digital data is particularly valuable in its clear compressed format because a recipient without authorization can easily use clear compressed digital data.

Furthermore, digital data in its clear compressed format is easily transmitted.

Therefore, it is an object of the present invention, in certain preferred embodiments thereof, to prevent the output of clear compressed content when the control information 160 does not permit such output.

The following discussion, beginning with the description of Fig. 3 and until the end of the description of Fig. 10, relates to various implementations of systems comprising the DCR 5. Detailed description of the DCR 5 resumes with the description of Fig. 11. In Figs. 3-10 and in the descriptions of Figs. 3- 10, in many cases, for ease of depiction and description, details of the DCR 5 are omitted.

Reference is now made to Fig. 3, which is a generalized block diagram illustration of a preferred implementation of the system of Fig. 1. In the system of Fig. 3, broadcast scrambled, XEA scrambled compressed content 250 is received as input by a device 310, comprising the DCR 5. Non-limiting examples of such the device 310 would be a set-top box (STB) or personal video recorder (PVR). In the implementation of Fig. 3, and based on the control information 160, the broadcast scrambled, XEA scrambled compressed content 250 bypasses the DCR 5 in order to be output as broadcast scrambled, XEA scrambled compressed content 250 to storage media (not shown in Fig. 3) comprised in a PVR 320.

Persons skilled in the art will appreciate that the PVR 320 may comprise the same unit or may share components with the DCR 5, and is shown as a separate unit in Fig. 3 for illustrative purposes only.

Reference is now made to Fig. 4, which is a generalized block diagram illustration of an alternative preferred implementation of the system of Fig. 1. In the system of Fig. 4, in accordance with received control information 160, broadcast scrambled content 50 is input into a device 310, comprising the DCR 5. Non-limiting examples of the device 310 would be a STB or PVR. In the implementation of Fig. 4, and based on the control information 160, the broadcast scrambled content 50 is input to the broadcast descrambler 110, producing compressed clear digital content 30. The compressed clear digital content 30 is output from the system. Persons skilled in the art will appreciate that the implementation of Fig. 4 is useful when the broadcast scrambled content 50 comprises interactive television data and does not comprise valuable video content.

Reference is now made to Fig. 5, which is a generalized block diagram illustration of another alternative preferred implementation of the system of Fig. 1. In the system of Fig. 5, in accordance with received control information 160, broadcast scrambled, XEA scrambled compressed content 250 is input into the device 310, comprising the DCR 5. Non-limiting examples of the device 310 would be a STB or PVR. In the implementation of Fig. 5, and based on the control information 160, the broadcast scrambled content, XEA scrambled compressed

content 250 is input to the broadcast descrambler 110, producing XEA scrambled compressed content 230.

The XEA scrambled compressed content 230 is then input into the XDDC 130, which, in an atomic operation, produces clear content 10. The clear content 10 thus produced is input into an analog television 510 for viewing.

Reference is now made to Fig. 6A, which is generalized block diagram illustration of another alternative preferred implementation of the system of Fig. 1. In the system of Fig. 6A, in accordance with received control information 160, broadcast scrambled, XEA scrambled compressed content 250 is input into the device 310 preferably comprising the DCR 5. Non-limiting examples of the device 310 would be a STB or PVR. Reference is now additionally made to Fig. 6B which is a generalized illustration of several elements which are preferably comprised in control information 160, useful for understanding Fig. 6A. Control information 160 preferably comprises: an owner or controller usage rule 610 ; a digital receiver policy 620 ; and user input 630.

In the implementation of Fig. 6A, at least one element of the owner or controller usage rule 610, and/or the digital receiver policy 620 prohibit decryption. In the implementation of Fig. 6A, the user attempts to use user input 630 of the control information 160 in order to override the decryption prohibition resulting from the combination of owner or controller usage rule 610 and the digital receiver policy 620.

In the implementation of Fig. 6A, and based on the control information 160, the broadcast scrambled content 250 is input to the broadcast descrambler 110, producing XEA scrambled compressed content 230. In the absence of any further control information, the XEA scrambled compressed content 230 output is not decrypted.

Lacking decryption, and in the absence of another means of performing XEA decryption, the XEA scrambled compressed content 230 output is rendered effectively useless.

Reference is now made to Fig. 7, which is a generalized block diagram illustration of another alternative preferred implementation of the system of Fig. 1. In the system of Fig. 7, in accordance with received control information

160, broadcast scrambled, XEA scrambled compressed content 250 is input into the device 310 comprising the DCR 5. Non-limiting examples of the device 310 would be a STB or PVR. In the implementation of Fig. 7, and based on the control information 160, the broadcast scrambled, XEA scrambled compressed content 250 is input to the broadcast descrambler 110, producing XEA scrambled compressed content 230.

The XEA scrambled compressed content 230 is input into the local scrambler 120 which outputs local scrambled, XEA scrambled compressed content 710. The local scrambled, XEA scrambled compressed content 710 is output by the device 310 and input into a digital television 720.

Within the digital television 720, in accordance with second generation control information 860, the local scrambled, XEA scrambled compressed content 710 is input into the local scrambling descrambler 730, producing XEA scrambled compressed content 230. The XEA scrambled compressed content 230 is input into the XDDC 130, which in an atomic operation produces clear content 10, suitable for viewing.

With reference to the second generation control information 860, it is appreciated that in all cases where there is control information 160 and second generation control information 860, the original control information 160 is preferably reflected in the second generation control information 860. Non- limiting examples of first generation control information 160 being reflected in second generation control information 860 would be, as discussed above, the DTCP specification basic copy states. A specific non-limiting example of the operation of first and second generation control information would be where first generation control information 160 allows copy once; in such a case, the second generation control information 860 for the copy would allow no further copying.

Another specific non-limiting example would be where the first generation control information 160 allows copy freely ; the second generation control information 860 would also allow copy freely.

Reference is now made to Fig. 8, which is a generalized block diagram illustration of another alternative preferred implementation of the system of Fig. 1. In the system of Fig. 8, in accordance with received control information

160, broadcast scrambled, XEA scrambled compressed content 250 is input into the device 310 comprising a DCR 5. A non-limiting example of the device 310 would be a STB or PVR. In the implementation of Fig. 8, and based on the control information 160, the broadcast scrambled, XEA scrambled compressed content 250 is input to the broadcast descrambler 110.

In accordance with the control information 160, the broadcast descrambler 110 takes no action. It is appreciated that the broadcast scrambler 110 preferably comprises an internal switch (not shown), which, based on the control information 160, is set to take no action. The broadcast scrambled, XEA scrambled compressed content 250 is input to the local scrambler 120. The local scrambler 120 outputs locally scrambled broadcast scrambled XEA scrambled compressed content 810. The locally scrambled broadcast scrambled XEA scrambled compressed content 810 is then output to a PVR 820. Persons skilled in the art will appreciate that the PVR 820 may comprise the same unit or may share components with the device 310, and is shown as a separate unit in Fig. 8 for illustrative purposes only. Should the PVR 820 comprise the same unit as the device 310, it is appreciated that the locally scrambled, broadcast scrambled, XEA scrambled compressed content 810 would preferably comprise locally scrambled, broadcast scrambled, XEA scrambled compressed content 850.

The locally scrambled, broadcast scrambled, XEA scrambled compressed content 810 is then input into a local scrambling descrambler 830, producing broadcast scrambled, XEA scrambled compressed content 250. The broadcast scrambled, XEA scrambled compressed content 250 is input into a broadcast descrambler 110.

In accordance with the second generation control information 860, the broadcast descrambler 110 takes no action, and the broadcast scrambled, XEA scrambled compressed content 250 is input to the local scrambler 120. Persons skilled in the art will appreciate that the second generation control information 860 preferably differs from the control information 160, as explained above in reference to Fig. 7. The local scrambler 120 outputs locally scrambled, broadcast scrambled, XEA scrambled compressed content 850. The locally scrambled, broadcast scrambled, XEA scrambled compressed content 850 is then stored on a

PVR storage disk 840. The locally scrambled, broadcast scrambled, XEA scrambled compressed content 850 preferably differs from the locally scrambled, broadcast scrambled, XEA scrambled compressed content 810 in that a different control word is preferably used in local scrambling.

With reference to the second generation control information 860, it is appreciated that in all cases where there is control information 160 and a second generation of control information 860, the original control information 160 is preferably reflected in the second generation of control information 860, as described above more fully with reference to Fig. 7.

Reference is now made to Fig. 9, which is a generalized block diagram illustration of another alternative preferred implementation of the system of Fig. 1. In the system of Fig. 9, in accordance with received control information 160, broadcast scrambled, XEA scrambled compressed content 250 is input into the device 310 comprising a DCR 5. A non-limiting example of the device 310 would be a STB or PVR. In the implementation of Fig. 9, and based on the control information 160, the broadcast scrambled, XEA scrambled compressed content 250 is input to the broadcast descrambler 110.

In accordance with the control information 160, the broadcast descrambler 110 takes no action, and the broadcast scrambled, XEA scrambled compressed content 250 is input to the local scrambler 120. The local scrambler 120 outputs locally scrambled, broadcast scrambled, XEA scrambled compressed content 810. The locally scrambled, broadcast scrambled, XEA scrambled compressed content 810 is then output to a PVR 820. Persons skilled in the art will appreciate that the PVR 820 may be comprised in the device 310, or may reside externally thereto, as illustrated in Fig. 9. Should the PVR 820 comprise the same unit as the STB or PVR 310, it is appreciated that the broadcast scrambled, XEA scrambled compressed content 250 is input into the broadcast descrambler 110, producing XEA scrambled, compressed encrypted content 230. The XEA scrambled, compressed encrypted content 230 is then input directly into the local scrambler 120, producing locally scrambled, XEA scrambled compressed content 710, as described below.

In accordance with second generation control information 860, the locally scrambled, broadcast scrambled, XEA scrambled compressed content 810 is then input into a local scrambling descrambler 830, producing broadcast scrambled, XEA scrambled compressed content 250. The broadcast scrambled, XEA scrambled compressed content 250 is input into a broadcast descrambler 110.

With reference to the second generation control information 860, it is appreciated that in all cases where there is control information 160 and a second generation of control information 860, the original control information 160 is preferably reflected in the second generation of control information 860, as described above more fully with reference to Fig. 7.

The broadcast descrambler 110 outputs XEA scrambled compressed content 230, which is input into a local scrambler 120. The local scrambler 120 produces locally scrambled, XEA scrambled compressed content 710 which is input into a digital television 720.

Within the digital television 720 the locally scrambled, XEA scrambled compressed content 710 is input into a local scrambling descrambler 730, producing XEA compressed content 230. The XEA compressed content 230 is input into the XDDC 130, which performs an atomic operation producing clear content 10 suitable for viewing.

Reference is now made to Fig. 10, which is a generalized block diagram illustration of another alternative preferred implementation of the system of Fig. 1. In the system of Fig. 10, in accordance with received control information 160, broadcast scrambled, XEA scrambled compressed content 250 is input into a device 310, comprising the DCR 5. Non-limiting examples of the device 310 would be a STB or PVR. In the implementation of Fig. 10, and based on the control information 160, the broadcast scrambled, XEA scrambled compressed content 250 is input to the broadcast descrambler 110.

In accordance with the control information 160, the broadcast descrambler 110 takes no action, and the broadcast scrambled, XEA scrambled compressed content 250 is input to the local scrambler 120. The local scrambler 120 outputs locally scrambled, broadcast scrambled, XEA scrambled compressed

content 810. The locally scrambled, broadcast scrambled, XEA scrambled compressed content 810 is then output to a PVR 820. Persons skilled in the art will appreciate that the PVR 820 may comprise the same unit or may share components with the device 310, and is shown as a separate unit in Fig. 10 for illustrative purposes only.

In accordance with second generation control information 860, the locally scrambled, broadcast scrambled, XEA scrambled compressed content 810 is then input into an local scrambling descrambler 830, producing broadcast scrambled, XEA scrambled compressed content 250. The broadcast scrambled, XEA scrambled compressed content 250 is input into a broadcast descrambler 110.

With reference to the second generation control information 860, it is appreciated that in all cases where there is control information 160 and a second generation of control information 860, the original control information 160 is preferably reflected in the second generation of control information 860, as described above more fully with reference to Fig. 7.

The broadcast descrambler 110 outputs XEA scrambled compressed content 230 which is input into the XDDC 130. The XDDC 130 performs an atomic operation outputting clear content 109 suitable for viewing on an analog television 510.

Referring back to Fig. 1, one skilled in the art will appreciate that the preferred modes of operation of the system of Fig. 1 comprise the following modes: A. Permitted modes The term"permitted modes", as used herein, refers to modes of operation of the system of Fig. 1, which are permitted by the owner or controller of the item of digital content received by the DCR 5.

I. Compressed encrypted content is to be output.

II. Clear uncompressed content is to be output.

III. Clear compressed content is to be output.

B. Default Mode, in the absence of any control information IV. No output is to be produced.

C. Forbidden mode V. Clear compressed content is attempted to be output, not in accordance with the control information 160.

Preferred modes of operation of the system of Fig. 1, in accordance with each of modes I-V, are now described in greater detail.

I. Compressed encrypted content is to be output.

Reference is now additionally made to Fig. 11, which is a generalized block diagram illustration of the system of Fig. 1, illustrating a mode in which compressed encrypted content is output.

In the mode of operation shown in Fig. 11, locally scrambled, broadcast scrambled, compressed content 70 is input to the DCR 5. The broadcast scrambled, compressed content 70 is descrambled by the local scrambler descrambler 100 producing broadcast scrambled, compressed content 50.

The broadcast scrambled, compressed content 50 is descrambled by the broadcast descrambler 110, producing compressed clear digital content 30.

The first switch 140 is set in accordance with the control information 160 received by the DCR 5 to output compressed clear digital content 30 to the local scrambler 120. The local scrambler 120 scrambles the compressed clear digital content 30, producing compressed locally scrambled output 310.

The second switch 150 is set in accordance with control information 160 received by the DCR 5 to allow output of the compressed locally scrambled output 310.

It is appreciated that there exist in the mode of operation shown in Fig. 11 possible alternative inputs to the DCR 5. Inputs not depicted include: locally scrambled. compressed content and broadcast scrambled compressed content. In the cases of locally scrambled compressed content and broadcast scrambled compressed content, in accordance with the control information 160, similarly to the case where locally scrambled, broadcast scrambled, compressed content 70 is input, the mode of operation shown in Fig. 11 produces compressed locally scrambled output 310.

II. Clear uncompressed content is to be output.

Reference is now additionally made to Fig. 12, which is a generalized block diagram illustration of the system of Fig. 1, illustrating a mode in which clear uncompressed content is to be output.

In the mode of operation in Fig. 12, locally scrambled, broadcast scrambled, XEA scrambled compressed content 270 is input to the DCR 5. The locally scrambled, broadcast scrambled, XEA scrambled compressed content 270 is descrambled by the local scrambling descrambler 100 producing broadcast scrambled, XEA scrambled compressed content 250.

The broadcast scrambled, XEA scrambled compressed content 250 is descrambled by the broadcast descrambler 110, producing XEA scrambled compressed content 230.

The first switch 140 is set in accordance with control information 160 received by the DCR 5 to output the XEA scrambled compressed content 230 to the XDDC 130.

The XEA scrambled compressed content 230 is XEA decrypted and decompressed by the XDDC 130, which performs an atomic operation producing uncompressed clear content 10.

The second switch 150 is not relevant to the operation of producing uncompressed clear content 10 ; therefore, the setting of the second switch 150 is preferably not changed from the default position thereof.

It is appreciated that there exist in the mode of operation shown in Fig. 12 possible alternative inputs to the DCR 5. Inputs not depicted include: locally scrambled XEA scrambled compressed content and broadcast scrambled XEA scrambled compressed content. In the cases of locally scrambled XEA scrambled compressed content and broadcast scrambled XEA scrambled compressed content, in accordance with the control information 160, similarly to the case where locally scrambled, broadcast scrambled, XEA scrambled compressed content 270 is input, the mode of operation shown in Fig. 12 produces uncompressed clear content 10.

III. Clear compressed content is to be output.

Reference is now additionally made to Fig. 13, which is a generalized block diagram illustration of the system of Fig. 1, illustrating a mode in which clear compressed content is to be output.

In the mode of operation in Fig. 13, locally scrambled, broadcast scrambled, compressed content 70 is input to the DCR 5. The locally scrambled, broadcast scrambled, compressed content 70 is descrambled by the local scrambling descrambler 100 producing broadcast scrambled, compressed content 50.

The broadcast scrambled, compressed content 50 is descrambled by the broadcast descrambler 110, producing compressed clear digital content 30.

The first switch 140 is set in accordance with control information 160 received by the DCR 5 to output compressed clear digital content 30 to the local scrambler 120. In accordance with control information 160 received by the DCR 5 and intended for the local scrambler 120, the local scrambler 120 does not scramble the compressed clear digital content 30; the local scrambler 120 preferably passes the received input as its output with no change. It is appreciated that the local scrambler 120 preferably comprises an internal switch (not shown), which in the present implementation is set to take no action.

The second switch 150 is set in accordance with control information 160 received by the DCR 5 to allow output of the compressed clear digital content 30.

It is appreciated that there exist in the mode of operation shown in Fig. 13 possible alternative inputs to the DCR 5. Inputs not depicted include: locally scrambled compressed content and broadcast scrambled compressed content. In the cases of locally scrambled compressed content and broadcast scrambled compressed content, in accordance with the control information 160, similarly to the case where locally scrambled, broadcast scrambled, compressed content 70 is input, the mode of operation shown in Fig. 13 produces compressed clear digital content 30.

IV. No output is to be produced.

Reference is now additionally made to Fig. 14, which is a generalized block diagram illustration of the system of Fig. 1, illustrating a mode in which no output is to be produced.

In the mode of operation in Fig. 14, locally scrambled, broadcast scrambled, compressed content 70 is input to the DCR 5. The locally scrambled, broadcast scrambled, compressed content 70 is descrambled by the local scrambling descrambler 100 producing broadcast scrambled, compressed content 50.

In the absence of valid control information 160 the broadcast scrambled, compressed content 50 is not descrambled by the broadcast descrambler 110, and is thus useless. Alternatively, if the control information 160 mandates local scrambling, the local scrambler 120 scrambles the broadcast scrambled, compressed content 50 producing locally scrambled, broadcast scrambled, compressed content 310.

It is appreciated that there exist in the mode of operation shown in Fig. 14 possible alternative inputs to the DCR 5. Inputs not depicted include : locally scrambled compressed content and broadcast scrambled compressed content. In the case of locally scrambled compressed content and broadcast scrambled compressed content, in the absence of valid control information 160, similarly to the case where locally scrambled, broadcast scrambled, compressed content 70 is input, the mode of operation shown in Fig. 14 produces no useful output.

V. Clear compressed content is attempted to be output, not in accordance with the control information 160.

Reference is now additionally made to Fig. 15, which is a generalized block diagram illustration of the system of Fig. 1, illustrating a mode in which clear compressed content is attempted to be output, not in accordance with the control information 160. It is appreciated that substitute control information 1560 is input to the DCR 5 by a person attempting to produce output not in accordance with control information 160.

In the mode of operation in Fig. 15, locally scrambled, broadcast scrambled, XEA scrambled, compressed content 270 is input to the DCR 5. The

locally scrambled, broadcast scrambled, XEA scrambled, compressed content 270 is descrambled by the local scrambling descrambler 100, which outputs broadcast scrambled, XEA scrambled, compressed content 250.

The broadcast scrambled, XEA scrambled, compressed content 250 is descrambled by the broadcast descrambler 110, producing XEA scrambled, compressed content 230.

The first switch 140 is set in accordance with substitute control information 1560 received by the DCR 5 to output XEA scrambled, compressed content 230 to the local scrambler 120. In accordance with the substitute control information 1560 received by the DCR 5 and directed to the local scrambler 120, the XEA scrambled, compressed content 230 bypasses the local scrambler 120.

The local scrambler 120 thereby preferably outputs XEA scrambled, compressed content 230. The second switch 150, in the presence of substitute control information 1560 is set to 0, so that the DCR 5 outputs XEA scrambled, compressed content 230. However, the XEA scrambled, compressed encrypted content 230 is unusable because it bypassed the XDDC 130, and the XEA encryption was never removed.

Thus, the attempt to spoof the system of Fig. 15 by providing substitute control information 1560 is rendered futile.

It is appreciated that there exist in the mode of operation shown in Fig. 15 possible alternative inputs to the DCR 5. Inputs not depicted include: locally scrambled compressed content and broadcast scrambled compressed content. In the case of locally scrambled compressed content and broadcast scrambled compressed content, in accordance with the control information 160, similarly to the case where locally scrambled, broadcast scrambled, compressed content 70 is input, the mode of operation shown in Fig. 15 produces useless compressed encrypted output 230.

Reference is now made to Fig. 16, which is a simplified flowchart illustration of a preferred method of operation of the system of Fig. 1. The method of Fig. 16 preferably comprises the following steps: Compressed digital content is received (step 810). If the rule referred to below in step 820 does not allow a clear compressed output format, the

compressed encrypted digital content is provided in a form which prevents production of clear compressed output as explained below in step 830. For example, and without limiting the generality of the foregoing, if the rule does not allow clear compressed output, the compressed encrypted digital content is provided as XEA encrypted content, as described above in reference to Fig. 15.

An output format for the compressed digital content is determined, the output format being based, at least in part, on all of the following: a user- requested output format ; received control information; and a rule determining whether a clear compressed output format is allowed (step 820).

Output is produced from the compressed digital content based on a result of step 820 (step 830). If the control information that does not permit clear compressed output has been replaced by unauthorized control information that permits clear compressed output, then the result of attempting to produce clear compressed will not be usable, as described above with reference to Figure 15.

It is appreciated that various features of the invention which are, for clarity, described in the contexts of separate embodiments may also be provided in combination in a single embodiment. Conversely, various features of the invention which are, for brevity, described in the context of a single embodiment may also be provided separately or in any suitable subcombination.

It will be appreciated by persons skilled in the art that the present invention is not limited by what has been particularly shown and described hereinabove. Rather the scope of the invention is defined only by the claims which follow: