Authentication and authorization epochs

Abstract

According to the invention, a method for securing an object associated with a content receiver that is part of a conditional access system is disclosed. In one step, the object is received by the content receiver. The object is loaded into memory. A timer begins counting, whereafter a determination is made when the timer expires. An event is executed that correlates to the timer expiring. An authorization status is changed based, at least in part, upon the timer expiring.

What is claimed is:  
     
         1 . A method for securing an object associated with a content receiver that is part of a conditional access system, the method comprising steps of: 
 receiving the object by the content receiver;    loading the object into memory;    beginning a timer counting;    determining when the timer expires;    executing an event that correlates to the determining step; and    changing an authorization status based, at least in part, upon the determining step.    
     
     
         2 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 1 , wherein the executing step comprises a step of executing a checkpoint that correlates to the determining step.  
     
     
         3 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 2 , wherein the checkpoint includes at least one of the following steps of: 
 authenticating a source of the object; and    authorizing use of the object by the content receiver.    
     
     
         4 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 1 , wherein the executing step comprises a step of querying a user of the content receiver for purchase of the object.  
     
     
         5 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 1 , further comprising a step of changing the authorization status based, at least in part, on the executing step.  
     
     
         6 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 1 , wherein the receiving step comprises a step of downloading the object from an authorized data channel.  
     
     
         7 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 1 , wherein the loading step comprises a step of loading the object in volatile memory.  
     
     
         8 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 1 , wherein the beginning step comprises a step of determining a time value that the timer measures.  
     
     
         9 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 1 , wherein the determining step is executed on a security processor separate from a general purpose processor.  
     
     
         10 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 1 , further comprising a step of removing the object from the memory based upon the changing step.  
     
     
         11 . A method for securing an object associated with a content receiver that is part of a conditional access system, the method comprising steps of: 
 receiving the object by the content receiver;    loading the object into memory;    beginning a timer counting;    determining when the timer expires;    executing a checkpoint that correlates to the determining step; and    changing an authorization status based, at least in part, upon the determining step.    
     
     
         12 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 11 , wherein the checkpoint includes at least one of the following steps of: 
 authenticating a source of the object; and    authorizing use of the object by the content receiver.    
     
     
         13 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 11 , further comprising a step of changing the authorization status based, at least in part, on the executing step.  
     
     
         14 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 11 , wherein the receiving step comprises a step of downloading the object from an authorized data channel.  
     
     
         15 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 11 , wherein the loading step comprises a step of loading the object in volatile memory.  
     
     
         16 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 11 , wherein: 
 the beginning step comprises a step of determining a time value that the timer measures; and    the time value is one of a predetermined time value or a random time value.    
     
     
         17 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 11 , further comprising a step of removing the object from the memory based upon the changing step.  
     
     
         18 . A method for securing an object associated with a content receiver that is part of a conditional access system, the method comprising steps of: 
 receiving the object by the content receiver;    loading the object into memory;    beginning a timer counting;    determining when the timer expires;    querying a user of the content receiver for purchase of the object after the determining step; and    changing an authorization status based, at least in part, upon the determining step.    
     
     
         19 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 18 , further comprising a step of remotely changing a time for the content receiver using encrypted commands wherein the timer is correlated to the time.  
     
     
         20 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 18 , further comprising a step of changing the authorization status based, at least in part, on the querying step.  
     
     
         21 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 18 , wherein the receiving step comprises a step of downloading the object from an authorized data channel.  
     
     
         22 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 18 , wherein the loading step comprises a step of loading the object in volatile memory.  
     
     
         23 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 18 , wherein the beginning step comprises a step of determining a time value that the timer measures.  
     
     
         24 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 18 , wherein the determining step is executed on a security processor separate from a general purpose processor.  
     
     
         25 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 18 , further comprising a step of removing the object from the memory based upon the changing step.  
     
     
         26 . A method for securing an object associated with a content receiver that is part of a conditional access system, the method comprising steps of: 
 receiving the object by the content receiver;    loading the object into memory;    beginning a usage counter counting;    determining when the usage counter reaches a limit;    querying a user of the content receiver for purchase of the object after the determining step; and    changing an authorization status based, at least in part, upon the determining step.    
     
     
         27 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 27 , further comprising a step of changing the authorization status based, at least in part, on the querying step.  
     
     
         28 . The method for securing the object associated with the content receiver that is part of the conditional access system as recited in  claim 27 , further comprising a step of removing the object from the memory based upon the changing step.