Granted Patent B2

US 12,526,142 · App. 18/713,457 · Granted Jan 13, 2026

Inventors: Marco Macchetti (Cheseaux-sur-Lausanne, CH); Jerome Perrine (Cheseaux-sur-Lausanne, CH); Nicolas Fischer (Cheseaux-sur-Lausanne, CH)

Assignee: NAGRAVISION SARL

H04L9/3073H04L9/0866

Abstract

Claims (66)

1 . A pairing method between a user device and an operator device, the user device being intended to receive conditional access data from the operator device, the user device having a user device identifier (UID), the operator device having an operator device identifier (OID), the method comprising:

receiving, by the user device, a user device key (KUID) derived from a first cryptographically secure function;

receiving, by the operator device, an operator device key (KOID) derived from a second cryptographically secure function, wherein the user device comprises a user device bilinear mathematical function (e (KUID, OID)) and the operator device comprises an operator bilinear mathematical function (e (UID, KOID)) which each define a pairing over an elliptic curve wherein the user device bilinear mathematical function and the operator bilinear mathematical function each define a bilinear mathematical function corresponding to the same cryptographic pairing over the same elliptic curve;

generating, by the operator device, a pairing key (KD=e (UID, KOID)) between the user device and the operator device, using the operator device key (KOID) and the user device identifier (UID) as variables of the operator bilinear mathematical function (e (UID, KOID));

generating, by the user device, the same pairing key (KD=e (KUID, OID)) using the user device key (KUID) and the operator device identifier (OID) as variables of the user device bilinear mathematical function e (KUID, OID) based on the user device and the operator device being paired; and

decrypting encrypted data to obtain the conditional access data.

2 . The pairing method of claim 1 , wherein the first cryptographically secure function and the second cryptographically secure function each comprise a scalar point multiplication operation over a respective group of points of the elliptic curve.

3 . The pairing method of claim 2 , wherein the user device identifier (UID) comprises an element of a first group of points on the elliptic curve, and the operator device identifier (OID) comprises an element of a second group of points on the elliptic curve.

4 . The pairing method of claim 3 , wherein the user device identifier (UID) is generated by applying hash-to-curve algorithm UID=H (device ID) to a device ID of the user device.

5 . The pairing method of claim 3 , wherein the operator device identifier (OID) is generated by applying hash-to-curve algorithm OID=H (operator ID) to an operator ID of the operator device.

6 . The pairing method of claim 2 , wherein the user device key (KUID) is derived from a first cryptographically secure function comprising the scalar point multiplication operation (KUID=N·UID) of a personalization key (N) which defines a point on the elliptic curve and the user device identifier (UID) which defines a point on the elliptic curve.

7 . The pairing method of claim 6 , wherein the personalization key (N) comprises an integer number.

8 . The pairing method of claim 2 , wherein the operator device key (KOID) is derived from a second cryptographically secure function comprising the scalar point multiplication operation (KOID=N·OID) of a personalization key (N) which defines a point on the elliptic curve and the operator device identifier (OID) which defines a point on the elliptic curve.

9 . The pairing method of claim 8 , wherein the personalization key (N) comprises an integer number.

10 . The pairing method of claim 1 , wherein a merged operator key, KO new , comprises a sum of respective operator keys KO i for a plurality of operators:

KO

new

=

∑

i

=

1

n

KO

ID

(

i

)

where KO ID (i) =N·O ID (i) where O ID (i) , is the operator device identifier of an ith operator of n (i) ID operators.

11 . The pairing method of claim 1 , further comprising:

providing a personalization key, providing an identifier of the user device to be paired, providing an identifier of the operator device to be paired, providing the first cryptographically secure function and the second cryptographically secure function;

calculating a user device key by applying the first cryptographically secure function to the personalization key and to the user device identifier; and

calculating an operator device key by applying the second cryptographically secure function to the personalization key and to the operator device identifier.

12 . A system comprising:

an operator device comprising a memory and at least one processor, the operator device having an operator device identifier (OID); and

a user device comprising a memory and at least one processor, the user device having a user device identifier (UID), wherein the user device comprises a user device bilinear mathematical function (e (KUID, OID)) and the operator device comprises an operator bilinear mathematical function (e (UID, KOID)) which each define a pairing over an elliptic curve, wherein the user device bilinear mathematical function and the operator bilinear mathematical function each define a bilinear mathematical function corresponding to the same cryptographic pairing over the same elliptic curve;

the user device configured to:

receive conditional access data from an operator device; and

receive a user device key (KUID) derived from a first cryptographically secure function; and

the operator device configured to:

receive an operator device key (KOID) derived from a second cryptographically secure function; and

generate a pairing key (KD=e (UID, KOID)) between the user device and the operator device, using the operator device key (KOID) and the user device identifier (UID) as variables of the operator bilinear mathematical function (e (UID, KOID));

the user device further configured to generate the same pairing key (KD=e (KUID, OID)) using the user device key (KUID) and the operator device identifier (OID) as variables of the user device bilinear mathematical function e (KUID, OID) based on the user device and the operator device being paired; and

decrypt encrypted data to obtain the conditional access data.

13 . The system of claim 12 , wherein the first cryptographically secure function and the second cryptographically secure function each comprise a scalar point multiplication operation over a respective group of points of the elliptic curve.

14 . The system of claim 13 , wherein the user device identifier (UID) comprises an element of a first group of points on the elliptic curve, and the operator device identifier (OID) comprises an element of a second group of points on the elliptic curve.

15 . The system of claim 14 , wherein the user device identifier (UID) is generated by applying hash-to-curve algorithm UID=H (device ID) to a device ID of the user device.

16 . The system of claim 14 , wherein the operator device identifier (OID) is generated by applying hash-to-curve algorithm OID=H (operator ID) to an operator ID of the operator device.

17 . The system of claim 13 , wherein the user device key (KUID) is derived from a first cryptographically secure function comprising the scalar point multiplication operation (KUID=N·UID) of a personalization key (N) which defines a point on the elliptic curve and the user device identifier (UID) which defines a point on the elliptic curve.

18 . The system of claim 17 , wherein the personalization key (N) comprises an integer number.

19 . The system of claim 13 , wherein the operator device key (KOID) is derived from a second cryptographically secure function comprising the scalar point multiplication operation (KOID=N·OID) of a personalization key (N) which defines a point on the elliptic curve and the operator device identifier (OID) which defines a point on the elliptic curve.

20 . The system of claim 12 , wherein a merged operator key, KO new , comprises a sum of respective operator keys KO i for a plurality of operators:

KO

new

=

∑

i

=

1

n

KO

ID

(

i

)

where KO ID (i) =N·O ID (i) ID where O ID (i) is the operator device identifier of an ith operator of n operators.

Priority Claims (1)

Continuity (1)

References Cited (19)