1. A method, comprising:
receiving an outbound packet in a network device, the outbound packet having a packet header;
modifying the outbound packet by adding a service identifier to a cleartext portion of the packet header;
when the outbound packet represents an event boundary, adding an event delimiter to the packet header; and
passing the outbound packet to an encryption process for packaging and transmitting across a tunnel.
2. The method of claim 1, wherein the network device comprises a virtual private network (VPN) client.
3. The method of claim 1, wherein the network device comprises a server.
4. A method, comprising:
receiving a packet in a network device, the packet being encrypted, the packet having a packet header;
accessing an unencrypted service identifier in the packet header; and
applying service control and charging logic to the packet using the unencrypted service identifier.
5. The method of claim 4, further comprising accessing an unencrypted event delimiter.
6. The method of claim 5, further comprising applying service control and charging logic to the packet using the unencrypted event delimiter.
7. The method of claim 4, further comprising routing the packet to a service module in response to the unencrypted service identifier.
8. The method of claim 4, further comprising using the unencrypted service identifier for billing purposes.
9. The method of claim 4, further comprising using the unencrypted service identifier for application-specific QoS.
10. An apparatus, comprising:
logic encoded in one or more tangible media for execution, and when executed operable to receive a packet, wherein the packet is encrypted and the packet includes a packet header;
logic encoded in one or more tangible media for execution, and when executed operable to access an unencrypted service identifier in the packet header; and
logic encoded in one or more tangible media for execution, and when executed operable to apply service control and charging logic to the packet using the unencrypted service identifier.
11. The apparatus of claim 10, wherein the packet is received from a virtual private network (VPN) tunnel.
12. The apparatus of claim 10, further comprising logic encoded in one or more tangible media for execution, and when executed operable to access an unencrypted event delimiter.
13. The apparatus of claim 12, wherein the service control and charging logic is configured to be applied to the packet using the unencrypted event delimiter.
14. The apparatus of claim 10, further comprising logic encoded in one or more tangible media for execution, and when executed operable to route the packet to a service module in response to the unencrypted service identifier.
15. The apparatus of claim 10, further comprising logic encoded in one or more tangible media for execution, and when executed operable to use the unencrypted service identifier for billing purposes.
16. The apparatus of claim 10, further comprising logic encoded in one or more tangible media for execution, and when executed operable to use the unencrypted service identifier for application-specific QoS.
17. An apparatus, comprising:
logic encoded in one or more tangible media for execution, and when executed operable receive an outbound packet in a network device, the outbound packet having a packet header;
logic encoded in one or more tangible media for execution, and when executed operable modify the outbound packet by adding a service identifier to a cleartext portion of the packet header;
logic encoded in one or more tangible media for execution, and when executed operable to add an event delimiter to the packet header when the outbound packet represents an event boundary; and
logic encoded in one or more tangible media for execution, and when executed operable pass the outbound packet to an encryption process for packaging and transmitting across a tunnel.
18. The apparatus of claim 17, wherein the network device comprises a virtual private network (VPN) client.
19. The apparatus of claim 17, wherein the network device comprises a server.
20. A means for processing an outbound packet, the means comprising:
a means for receiving the outbound packet in a network device, the outbound packet having a packet header;
a means for modifying the outbound packet by adding a service identifier to a cleartext portion of the packet header;
a means for adding an event delimiter to the packet header when the outbound packet represents an event boundary; and
a means for passing the outbound packet to an encryption process for packaging and transmitting across a tunnel.
21. A means for processing a packet, the means comprising:
a means for receiving the packet in a network device, the packet being encrypted, the packet having a packet header;
a means for accessing an unencrypted service identifier in the packet header; and
a means for applying service control and charging logic to the packet using the unencrypted service identifier.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A method of communicating with a host in a security module providing information necessary for decrypting encrypted broadcast data received by the host, the method comprising:
if an event occurs, the event being characterized as an event that a user of the host is to be notified about with regard to the decryption of the encrypted broadcast data, generating a user notification message including information about the event that occurred; and
transmitting the user notification message to the host.
2. The method of claim 1, wherein the security module is a hardware based module and includes a software based security client distributed from an external server providing the encrypted broadcast data,
wherein the encrypted broadcast data is received by the host via a cable network.
3. The method of claim 2, wherein the event occurs when an error regarding the security module occurs.
4. The method of claim 2, wherein the event occurs when the security module or the security client is upgraded.
5. The method of claim 3, wherein the user notification message comprises at least one of information about the event that occurred, information about a type of the event that occurred, information about output conditions that are conditions for outputting the information about the event that occurred, information about whether to store the information about the event that occurred, and information about a data size of the user notification message.
6. A method of communicating with a security module providing information necessary for decrypting encrypted broadcast data, the method comprising:
receiving a user notification message from the security module indicating that an event occurs, the event being characterized as an event that a user is to be notified about with regard to the decryption of the encrypted broadcast data; and
outputting information about the event that occurred, the information being included in the user notification message.
7. The method of claim 6, wherein the user notification message comprises information about outputting conditions that are conditions for outputting the information about the event that occurred,
wherein the outputting of the information comprises: outputting the information about the event that occurred, when the outputting conditions are satisfied.
8. The method of claim 6, wherein the security module is a hardware based module and includes a software based security client distributed from an external server providing the encrypted broadcast data,
wherein the encrypted broadcast data is received via a cable network.
9. The method of claim 8, wherein the event occurs when an error regarding the security module occurs.
10. The method of claim 8, wherein the event occurs when the security module or the security client is upgraded.
11. The method of claim 6, wherein the user notification message comprises at least one of information about a type of the event that occurred, information about whether to store the information about the event that occurred, and information about a data size of the user notification message.
12. A security module providing information necessary for decrypting encrypted broadcast data received by a host and communicating with the host, the security module comprising:
a message generating unit that, if an event occurs, the event being characterized as an event that a user of the host is to be notified about with regard to the decryption of the encrypted broadcast data, generates a user notification message including information about the event that occurred; and
a transmitting unit that transmits the user notification message to the host.
13. The security module of claim 12, wherein the security module is a hardware based module and includes a software based security client distributed from an external server providing the encrypted broadcast data,
wherein the encrypted broadcast data is received by the host via a cable network.
14. The security module of claim 13, wherein the event occurs when an error regarding the security module occurs.
15. The security module of claim 13, wherein the event occurs when the security module or the security client is upgraded.
16. The security module of claim 14, wherein the user notification message comprises at least one of information about the event that occurred, information about a type of the event that occurred, information about output conditions that are conditions for outputting the information about the event that occurred, information about whether to store the information about the event that occurred, and information about a data size of the user notification message.
17. An apparatus for communicating with a security module providing information necessary for decrypting encrypted broadcast data, the apparatus comprising:
a receiving unit that receives a user notification message from the security module indicating that an event occurs, the event being characterized as an event that a user is to be notified about with regard to the decryption of the encrypted broadcast data; and
an outputting unit that outputs information about the event that occurred, the information being included in the user notification message.
18. The apparatus of claim 17, wherein the user notification message comprises information about outputting conditions that are conditions for outputting the information about the event that occurred,
wherein the outputting unit outputs the information about the event that occurred, when the outputting conditions are satisfied.
19. The apparatus of claim 17, wherein the security module is a hardware based module and includes a software based security client distributed from an external server providing the encrypted broadcast data,
wherein the encrypted broadcast data is received via a cable network.
20. The apparatus of claim 19, wherein the event occurs when an error regarding the security module occurs.
21. The apparatus of claim 19, wherein the event occurs when the security module or the security client is upgraded.
22. The apparatus of claim 17, wherein the user notification message comprises at least one of information about a type of the event that occurred, information about whether to store the information about the event that occurred, and information about a data size of the user notification message.
23. A method of controlling a security module providing information necessary for decrypting first broadcast data encrypted by using a first method, the method comprising:
receiving second broadcast data encrypted by using a second method, and receiving information about the second broadcast data;
determining whether the security module provides information necessary for decrypting the second broadcast data based on the information about the second broadcast data; and
selectively controlling the security module, based on a result of the determining, to delete a first security client that is included in the security module and provides the information necessary for decrypting the first broadcast data.
24. The method of claim 23, further comprising:
receiving upgrade data for including a second security client providing the information necessary for decrypting the second broadcast data in the security module; and
controlling the second security client to be included in the security module by using the upgrade data.
25. The method of claim 23, wherein the first security client is a software based module distributed by a service provider providing the first broadcast data,
wherein the security module is a hardware based module used to drive the first security client, and
wherein the second broadcast data is received via a cable network.
26. A method of controlling a security module providing information necessary for decrypting encrypted broadcast data, the method comprising:
receiving a signal instructing initialization of the security module; and
if the signal is received, controlling the security module to delete a software based security client providing the information necessary for decrypting the encrypted broadcast data.
27. An apparatus for controlling a security module providing information necessary for decrypting first broadcast data encrypted by using a first method, the apparatus comprising:
a receiving unit that receives second broadcast data encrypted by using a second method, and receiving information about the second broadcast data;
a determining unit that determines whether the security module provides information necessary for decrypting the second broadcast data based on the information about the second broadcast data; and
a controller that selectively controls the security module, based on a result of the determining, to delete a first security client that is included in the security module and provides the information necessary for decrypting the first broadcast data.
28. The apparatus of claim 27, wherein the receiving unit receives upgrade data for including a second security client providing the information necessary for decrypting the second broadcast data in the security module; and
wherein the controller controls the second security client to be included in the security module by using the upgrade data.
29. The apparatus of claim 27, wherein the first security client is a software based module distributed by a service provider providing the first broadcast data,
wherein the security module is a hardware based module used to drive the first security client, and
wherein the second broadcast data is received via a cable network.
30. An apparatus for controlling a security module providing information necessary for decrypting encrypted broadcast data, the apparatus comprising:
a receiving unit that receives a signal instructing initialization of the security module; and
a controller that, if the signal is received, controls the security module to delete a software based security client providing the information necessary for decrypting the encrypted broadcast data.
31. A computer readable recording medium having recorded thereon a program for executing the method of claim 1.
32. A computer readable recording medium having recorded thereon a program for executing the method of claim 6.
33. A computer readable recording medium having recorded thereon a program for executing the method of claim 23.
34. A computer readable recording medium having recorded thereon a program for executing the method of claim 26.