High security pay television system

A high security pay television system is provided in which subscribers are provided with a decoder and with periodically changed removable memory modules. The decoder only functions to properly descramble the scrambled broadcast signal when a changeable system-wide code is available in the decoder. The code can either be carried in the memory module, or an internal code unique to the decoder and resident in the decoder can be combined with a external code in the removable memory module, and also unique to that decoder, to generate the common systemwide system code. Program viewership is written on the removable memory module. The removable memory module is provided with a pre-written limit of program viewing authorization so that when the limit is reached, further viewing is not possible.

 

I claim:

1. A pay television broadcast system comprising

a broadcast station for distribution of programs in live and recorded formats including (1) scrambling means for imposing a scrambling signal on the program signal to create a scrambled broadcast signal, the scrambling signal being the inverse of a signal generated from a pre-selected changeable code, and (2) an encoder to imbed a broadcast code in the broadcast signal, the changeable codes being different for the live and the recorded formats so that the code for live formats broadcasts can be changed more often than the code for the recorded format;

an alterable, reusable memory module for each viewing station carrying the changeable codes thereon;

a receiving station decoder for each receiving station including (1) means for one of the changeable codes from a removable memory module inserted in that decoder, the changeable code being selected to match the program type to be viewed, (2) means for imposing a descrambling signal complementary to the scrambling signal on the received broadcast signal, the descrambling being generated from the changeable code, and (3) writing means for writing information derived from the broadcast code on the memory module, the information indicating whether the broadcast viewed was recorded or live; and

the memory module having pre-written into it information which can be recognized by the receiving station decoder to limit the extent of program descrambling which can occur in the receiving station decoder.

2. The system of claim 1 wherein the memory of the memory module being organized into blocks of fixed size, the information pre-written into the memory module including codes indicating to the receiving station decoder that at least a portion of the blocks are not available for writing information therein so that the amount of programming which may be decoded with a single memory module is limited by the available memory blocks in that particular memory module.

3. The system of claim 2 wherein the codes in the memory module are located at defined locations in each block of memory in the memory module.

4. The system of claim 2 wherein the information pre-written in the memory module also includes a numerical value representing an authorization limit for viewing over the air broadcasts, the broadcast code carrying information as to the program value, and the receiving station accumulating the values of the programs descrambled in the memory module until the limit is reached.

5. The system of claim 2 wherein the codes in the blocks of memory in the memory module also indicate the location of the changeable code carried thereon.

6. The system of claim 5 wherein the code for the recorded format is not changed over time for viewing time-independent broadcasts, with the codes in the memory blocks indicating the nature of the changeable code carried in each block.

7. The system of claim 1 wherein the information written into the memory module includes a numerical value corresponding to a limit on the amount of viewing authorized, and wherein the broadcast code carries information as to the value of any program, the receiving station decoder accumulating the values of the programs descrambled in a memory location in the memory module until the accumulated value reaches the limit after which the decoder will not descramble programming until the removable memory module is replaced.

8. The system of claim 7 wherein the accumulation of values of the programs descrambled is accomplished by decrementing the initial numeral value until it reaches zero.

9. The system of claim 7 wherein the accumulation of values of the programs descrambled is accomplished by successively adding the values in a single location and comparing the accumulated total to the numerical value of the limit until the accumulated value reaches the limit.

10. The system of claim 1 wherein the changeable code in the memory module is a station-unique external code and wherein the receiving station decoder also includes a station-unique internal code, the receiving station decoder combining the internal and the external codes to create the descrambling signal.

11. The system of claim 1 wherein the pre-written information in the billing memory module may be remotely altered by one of (1) a numerical value entered into a keypad on the receiving station, (2) a telephone link to the receiving station and (3) an addressable code carried in the broadcast code.

12. The system of claim 1 wherein the memory module is an electrically alterable read-only memory integrated circuit.

13. In a pay television system, a receiving station signal decoder for a scrambled broadcast signal also containing a broadcast code comprising:

a microprocessor;

a demodulator to derive the broadcast code from the broadcast signal;

an electrically alterable memory module containing at least two pre-written external codes which can be used to generate a systemwide system code, one code used for time-independent programming and one code used for time-dependent programming, and also a portion onto which program information may be entered being pre-written with information to limit the amount of programming which may be descrambled;

means for generating a descrambling signal complementary to the scrambling signal upon input of a proper numerical sequence; and

the microprocessor programmed by a program (1) to read one of the external codes from the memory module, the external code selected being appropriate for the program being broadcast, (2) to operate on the external code to generate the systemwide system code, (3) to generate and output to the descrambling signal generating means a numerical signal generated from the system code, (4) to receive the broadcast from the demodulator (5) to read the information in the memory module as to the limit on the amount of programming which may be viewed and to determine if that limit has been reached, and (6) to write information about the programs actually descrambled, as determined from the broadcast code, in the memory module if the limit has not been reached, so that use of the decoder can be limited by the information pre-written in the memory module.

14. The decoder of claim 13 wherein the broadcast code contains information about the billing charge for the programs which are unscrambled by the receiving station decoder, the information about the billing charges for each program descrambled being accumulated by the microprocessor in the memory module until the limit is reached.

15. The decoder of claim 14 wherein the accumulation of the charge information is accomplished by subtracting the value of the billing charges from the pre-written limit.

16. The decoder of claim 14 wherein the accumulation is accomplished by successively adding the values of the charges for the programs viewed and comparing that value to the pre-written limit.

17. The decoder of claim 13 wherein the memory module also has an area dedicated for writing information derived from the broadcast code therein and the size of the available portion of such area is determined by the information pre-written in the billing module.

18. The decoder of claim 13 wherein the memory of the memory module is arranged in blocks of defined size and wherein the limit of the amount of program descrambling is accomplished by limiting the blocks into which information as to the broadcasts descrambled ma be entered.

19. The decoder of claim 18 wherein the blocks in the memory module are identified by type codes resident in the memory module to segregate the blocks into blocks reserved for entry of information as to programs descrambled, blocks containing external code, and blocks which are unavailable for information entry or reading.

20. A decoder as claimed in claim 13 wherein there is more than one type of external code in the memory module and the particular external code as well as the type to be used for a particular program to be descrambled is selected by a portion of the broadcast code and the block identification code in the memory module.

21. A decoder as claimed in claim 13 wherein the descrambling signal generating means includes a digital to analog converter to convert the numerical output for the microprocessor to an analog descrambling signal.

22. A decoder as claimed in claim 13 wherein the memory module is an electrically alterable read-only memory integrated circuit.

23. A decoder as claimed in claim 13 wherein the information pre-written in the memory module may be remotely altered by information from at least one of (1) a user operable keypad, (2) a telephone link to the receiving station and (3) an addressable code in the broadcast code.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a schematic block diagram view of a broadcast system constructed in accordance with the present invention.

FIG. 2 is a flow chart indicating the functioning of a program for operation of the microprocessor contained in the decoder of the system of FIG. 1.

FIG. 3 is a schematic view of one possible scheme of memory allocation in the memory module of the system of FIG. 1.

DESCRIPTION OF THE PREFERRED EMBODIMENT

Illustrated in FIG. 1, and generally indicated at 10, is a decoder for use in a pay television broadcast system constructed in accordance with the present invention. The decoder 10 is adapted to receive a scrambled broadcast signal from a broadcast station 12, broadcasting either over the air or over cable, from a video cassette recorder 14 onto which a broadcast station signal has been recorded, or from other television broadcast transmittal systems. The term "broadcast" is used here to refer to a video program which will typically be over-the-air or cable distributed television, but may also be programming distributed by other forms of transmission such as tape (i.e. VCR) distribution, satellite, microwave, or any similar method. The decoder s intended to unscramble the scrambled broadcast signal, assuming that the system user has been properly authorized to gain access to the broadcast signal, and produce an unscrambled program signal for viewing by a subscriber on a conventional television set 16.

The scrambled broadcast signal, whether from an over-the-air broadcast station or from a VCR or other prerecorded media, is received in the decoder 10 by a demodulator and tuner 18. The demodulator and tuner 18 includes suitable electronics of a type well known to the art to tune for the specific broadcast frequency selected by the viewer and to demodulate from the scrambled broadcast signal certain coded information for transmittal to the microprocessor as will be discussed in greater detail below. The coded information in the broadcast signal can be encoded by any of several well-known techniques, such as AM modulation of the FM carrier, vertical blanking interval transmission, or the use of a subcarrier. The particular method used for-encoding these digital broadcast codes in the broadcast signal is not important as long as the decoding circuitry included in the demodulation and tuner 18 is relatively economical and efficient.

The broadcast signal output of the demodulator and tuner 18, which is a broadcast signal which is still scrambled, is transmitted directly to a mixer 20 located at the output end of the decoder 10. The mixer 20 includes two inputs. If the other input to the mixer 10 precisely is complementary to the scrambling signal imposed on the scrambled broadcast signal, the action of the mixer 20 in combining these two signals will result in a completely unscrambled program signal as the output of the decoder 10 for transmittal to the viewers television set 16. The remaining elements of the decoder 10 are intended to generate this complementary descrambling signal.

The output of the digital code decoder in the demodulator and tuner 18 is fed as input to a microprocessor 22. The microprocessor 22 has access to electronic memory 24, in the form of both read only memory (ROM) and random access memory (RAM), which may or may not be included in a single integrated circuit with the microprocessor 22 itself, or which may also be included in a separately located integrated or discrete memory module 24 located in the decoder 10. The microprocessor 22 also has an interface to receive and write information onto a removable memory module 26 which can be removed from the decoder 10 and which will be discussed in greater detail below. The microprocessor 22 also provides outputs to LED drivers 28 which are connected to a visual display 30 consisting of LEDs or other optical signal generating apparatus. The visual display 30 is used to display the status of the decoder operation to the viewer, such as station watched, program content or cost, etc. One or more control switches 32 are located on the exterior of the decoder 10 which provide inputs which can be read by the microprocessor 22. The output of the microprocessor 22 is fed to a digital to analog (D/A) converter 34 whose output is connected to the mixer 20.

In order to understand the functioning of the decoder 10 as illustrated in FIG. 1, it is necessary to understand the purpose, identity and function of four different codes associated with the pay television broadcast system disclosed here. These codes are referred to as numerical codes since they are most easily used in a digital form but it should be understood that the exact manner of expression of the codes may vary from system to system and that many forms of digital code expression are usable in a system of this type, such as binary, binary-coded decimal, decimal, hexadecimal, ASCII, etc. It is simply important that these codes be digitally transmissible and be capable of being processed and operated on in the decoder 10.

A first code used in the system is referred to as the broadcast code. The broadcast code is a numerical code associated with a specific television program broadcast. The broadcast code is imbedded in the television broadcast signal by any of several methods such as AM modulation of an FM audio carrier, an inband FSK (frequency shift keyed) modulated carrier signal transmitted within the vertical blanking interval in the broadcast signal, the use of a subcarrier, or by any of the other well known methods of transmitting digital information along with the analog television picture signal. Whatever method is used for modulating the broadcast code into the broadcast signal, the demodulator 18 must be specifically adapted to demodulate that specific numerical broadcast code from the input broadcast signal and transmitting it to the microprocessor 18. Such demodulators are well known in the art. As will be discussed in greater detail below, the broadcast code may include smaller units, or sub-codes, which may serve as an identification of the exact program being broadcast, of the broadcast station, and of the category of program content contained in the broadcast signal program. Other useful information as may be appropriate for a given system may also be included in the broadcast code.

Three related codes utilized within the system of the present invention are the internal, external, and system codes. The first of those codes is referred to as an internal code. The internal code is contained in the ROM 24 associated with the microprocessor 22 and is unique to each of the decoders 10 constructed in accordance with the present invention. The external code is a code which may, for purposes of understanding, be considered as a sort of compliment to the internal code. The external code is contained in the removable memory module 26 which is uniquely associated with the decoder 10. In general, the internal and external codes may be manipulated or combined by a standard algorithm, such as simple addition, to arrive at the system code which is common to all of the decoders 10 used within a single pay television broadcast system constructed in accordance with the present invention. While simple addition of the external and internal codes will usually prove sufficient, it is certainly possible for the operation of combining the internal and external codes to involve a more sophisticated simple or multi-step algorithm as long as the result of the combination is predictable. The internal code contained in the ROM 24 of each decoder 10 is fixed and unique to the specific decoder 10 while the external code, contained in the removable memory module 26 for that specific decoder 10, must also be unique to that decoder 10 but is changed from time to time so that the system code can be changed. In other words, the internal code is constant while the external code and the system code are changed from time to time in synchrony. External codes are normally changed by replacing the removable memory module 26 but it is also possible for one module 26 to carry more than one external code with the proper code being either selected by time period or by the broadcast code as in the example below.

The other specific detail of the system of the present invention requiring specific explanation is the provision for the removable memory module 26. The removable memory module is be a module of electrically alterable and readable memory which must be removable from the decoder 10 and transportable. While a wide variety of removable and portable memory media are suitable within the use of a system in accordance with the present invention, it is particularly useful to use a small card or plastic holder containing therein an erasable programmable read only memory (EPROM) circuit or, most preferably, an electrically erasable programmable read only memory (EEPROM). The use of an EEPROM as the module 26 allows for a small and lightweight memory module to be utilized which can be readily transported, as through the mail, and which can be carried in a suitable carrier so that it can be easily plugged into and removed from a suitable port formed in the decoder 10. Other suitable portable, removable magnetic or electronic digital memory modules are possible in substitution for the EEPROM, including, most notably EPROMs and magnetic cards or strips. An EEPROM offers the best alternative because of its ease of re-use and adaptability. The EEPROM carrier should mate with the decoder 10 so that the electronic circuitry of the microprocessor 22 can read from and write to the EEPROM 26. It is specifically intended that the removable memory module, in the form of the EEPROM 26, will be replaced periodically, as for an example, monthly, and be transmitted to a remote location for reading for billing purposes. Subsequent removable memory modules 26 will be provided to the system subscriber on a periodic basis, i.e. monthly. It is specifically intended that new removable memory modules 26 will be provided to the subscriber only if the subscriber has suitably paid for usage recorded in a prior removable memory module 26 previously sent to the central billing system. The removable memory module 26 therefore must include provisions for carrying thereon an electronically or electromagnetically readable message and must have a provision thereon for writing program viewing information thereon so that it can be returned to the billing authority for scanning to determine what the system subscriber has viewed. Each removable module 26 carrying codes thereon is unique to a pre-selected decoder 10 since the external codes on it are only properly complementary to the internal code of that decoder 10 so each module is only useful at a pre-determined viewing station for a pre-selected time period.

Illustrated in FIG. 2 is a flow chart demonstrating in schematic chart form the general operation flow of the programming for the microprocessor 22 of the decoder 10. The microprocessor is in constant operation when the decoder is in use and so begins operation with the powering up of the decoder 10 as designated by program step 50 in FIG. 2. As the program proceeds in its operation, the next program step executed is at program step 52 in which the demodulator 18 is enabled to demodulate the broadcast code from the scrambled broadcast system received by the antenna connected to the decoder 10. This demodulated broadcast code, as first described above, is a numeric code, in binary, preferably carried in a non-video portion of the broadcast signal. An error check routine is preferably included in the broadcast code, such as a parity check or other similar routine, and the program then proceeds to program step 54 to generate an error check number and ascertain that no error in the transmission of the broadcast code has occurred. If the program does detect an error in the broadcast code, execution of the program loops back to the point designated at A to retrieve a second broadcast code from the scrambled broadcast signal. If the error check number indicates a satisfactory operation and there is no error detection, the program proceeds past the error check test at step 56 to program step 58. In program step 58 the program times itself based on the receipt of the broadcast code. The execution of the subsequent program steps need to be synchronized with the time period of the scrambling wave imposed on the broadcast signal. Therefore the first part of the broadcast code preferably includes a synchronization segment so that the decoder 10 can synchronize its generation of the descrambling signal with the scrambling signal. Assuming that all the microprocessors 22 and each of the decoders 10 in the entire broadcast system has a crystal oscillator having a sufficient accuracy in its clock timing, the timing of all the program steps subsequent to step 58 can be empirically measured and the imposition of the scrambling signal on the broadcast signal can be synchronized to delay for a time period sufficient for the program and the decoders to institute the descrambling signal in synchronization with the scrambling signal imposed on the broadcast code.

After the program is suitably synchronized, the program then proceeds to step 60 in which the program identifies an external code address. The external code address will be one of the addresses contained in the removable memory module or EEPROM 26. It is specifically intended that within the removable memory module 26 there can be more than one external code. Thus for any viewing period there can be several external codes which may be usable and any one of the codes can be selected for use in generating the system code during a particular program broadcast. If only one external code is used at a time in the memory module 26, this step can be omitted. A portion of the broadcast code is used as an address locator and may be subject to mathematical manipulation or multiplication to generate an external code address. This address is generated internally by the microprocessor 22 and is presented to the removable memory module or EEPROM 26 to read the external code. However, before the external code can be presented, an additional security measure must be overcome. The EEPROM 26 is preferably presented with a latch code. The latch code is a numeric code which must be presented to the EEPROM 26 before the EEPROM 26 will accept an address and allow access to the contents of data in its memory. It is specifically preferred that custom EEPROMs 26 be constructed which will completely disable themselves and render themselves non-functional if an incorrect latch code is presented to them. This can be accomplished by constructing the EEPROMs with a disabling fuse connected to the endpoints of all incorrect switching patterns so that the EEPROM will be disabled if the latch code is wrong. Thus at program step 62, the microprocessor 22 presents to the EEPROM 26 the latch code to enable the reading of information contained in the removable memory module or EEPROM 26. Then, in program step 64 the external code is read from the removable memory module 26 and stored in the random access memory of the microprocessor 22. The microprocessor now contains in its memory both the broadcast code derived from the scrambled broadcast signal generated by the broadcast station and also contains within it the external code retrieved from the removable memory module 26. It is assumed that the microprocessor 22 already has access to, preferably stored in its own ROM 24, its own unique internal code specific to the decoder 10.

At program step 66 the microprocessor scans the status of control switches 32. The control switches 32 are intended to allow the user to select a program content level by setting the control switches 32. For example, if the control switch 32 consists of one simple two pole switch, one pole might indicate adult only viewing while the other pole of the switch 32 might indicate viewing suitable for both adults and children. At program step 62, the microprocessor 22 will read the status of the control switch or switches 32 to determine the program content level selected by the user. The EEPROM 26 may be provided with decoding information to enable the microprocessor 22 to relate the output of the control switches 32 to specific program content available for viewing in that billing period. It is also specifically preferred that the control switch or switches 32 may be under the operation of a security device, such as a lock and key, which would allow parents to disable the decoder 10 from descrambling programs of adult content but which would still allow the parents or other controllers of the decoder 10 to gain access to all program materials which they would choose to view. The program then proceeds to a branch test at program step 68 to determine whether the user has selected the proper class of programs for input which are presently being received on the broadcast signal. This decision is made by comparing the status of the control switches 32 with the program content coding contained within the broadcast code. If the broadcast code contains program content identification which is allowed for viewing by the control switches 32, the program proceeds through conditional branch 68 to execute the remainder of the program to descramble the broadcast signal. If this class of program content has not been selected by the user, the program branches back to A and the broadcast signal is therefore not descrambled and no access to this unscrambled signal is available to the user.

If the program successfully passes conditional branch 68, the program then proceeds to program step 70 in which the internal and external codes are added together and the result is stored separately. The program then proceeds to program step 72 in which the result of addition of the internal and external codes is multiplied by a digit of the broadcast code to generate the system code. It should be specifically remembered at this point that the system code is a system-wide code which again is preferably a binary number common to all of the decoders 10 contained in the system. Since the broadcast code is also common to all of the decoders contained in the system, it is therefore the addition of the internal and external codes which gives rise to a number which is system-wide in use. The provision for step 72 to multiply that system-wide total times a digit of the broadcast code is only to allow the internal and external codes to be shorter in the number of digits. If a sufficient number of digits can be contained in the removable memory module 26 to allow sufficient number of choices of external codes, program step 72 can be omitted, and the system code can be determined simply by adding the internal and external codes together. The exact method of combining the external and internal codes together to generate the system code may be varied and any simple or complex algorithm could be used, such as addition, multiplication, addition and multiplication (as in this example) or any other similar technique. It is simply necessary that the algorithm be predictable and that both the internal and external code are necessary to generate the system code. What is specifically important to the functioning of the device as envisioned by the present invention is that the internal and external codes be unique to the specific decoder 10 while the system code generated by use of the combining algorithm on the internal and external codes is system-wide in its usage.

At program step 74 the program proceeds to fetch a pre-selected fixed number from the ROM 24 associated with the microprocessor 22. At program step 76 the program uses the fixed number to transform the system code into a larger digit number. This may be a simple multiplication step or may be some other mathematical or algebraic expansion of the system code to make a transformed fixed number having a larger number of digits. The purpose in the transformation step embodied in steps 74 and 76 of the program is to allow a system code of a smaller number of digits to be utilized, with the number of digits in the code being predictably expanded by steps 74 and 76 to make a fairly lengthy numerical sequence for use in the descrambling technique. At program step 78 the transformed number is then sequentially multiplied by each digit of the system code to generate a continuous numerical sequence. That numerical sequence is treated as a series of digits which are then outputted at program step 80 to the digital to analog converter 34. After output of the numerical sequence to the digital to analog converter 34, the program again loops back to A. The purpose of the numerical sequence generation and program step 78 and the output of that sequence in program step 80 is to create a sequence of single digit numerical numbers at the output of the microprocessor 22. These numbers can be 4 or 8 bit in character, or any other bit size appropriately selected for the application. This numerical sequence is converted by the D to A converter 34 to an analog voltage level which is inputted to the mixer 20. It is specifically intended that the broadcast station 12 broadcasting the scrambled broadcast signal has used the similar numerical sequence in its scrambling operation and the exact inverse of the D to A converter 34 contained in the decoder to impose a scrambling signal on the broadcast signal which should be the exact compliment of the output of the D to A converter 34 if the microprocessor 22 has properly enabled descrambling of the broadcast signal. It is therefore specifically intended that the sequence of numerical digits created in program step 78 should be exactly sufficient to cover one preselected repetitive period of the broadcast signal, such as a single frame of a video transmission. Thus the length of the numerical sequence created in step 78 is preferably adjusted, depending on the time period for each scrambling sequence selected and on the bit size of the numerical output of the microprocessor 22. It is simply important that the output of the microprocessor 22 be a predetermined fixed numerical sequence which is derived through an algorithm solely dependent on the numerical system code for its effective and reliable operation.

It would also be necessary, in addition to the program steps illustrated in FIG. 2, that the program periodically write the identification of the program being watched by the viewer on the EEPROM 26. This is not illustrated as part of the program sequence of FIG. 2 since it would only have to be done at great intervals compared to the descrambling which must be done continuously. Periodically the program would either branch or interrupt and a routine called to write the program and perhaps the broadcast station code on a suitable location on the EEPROM 26. The routine also would appropriately look for the correct location to write these codes so that they could be properly read when the module 26 is sent to the central billing facility. Thus the particulars of this routine and the code writing format on the EEPROM 26 are not critical as long as the results are predictable and the results retrievable.

In order to better illustrate the workings of the present invention, the operation of this system will be described with reference to a particular example of its application. These numbers will be presented here in decimal, or base ten, format solely for the convenience in comprehension by the reader. Assume, for example, that the broadcast code incorporated into the scrambled broadcast signal consists of the following number: 10101 8252 1 17 110 230

This broadcast code consists of several parts. The first part is the numerical sequence of numbers 10101, which sequence can be of any selected length and which is intended to provide synchronization information for the system. The next section of digits can be selected, as for example the digits 8252, which can serve as the program identification number. This program identification number or code can consist of one or more imbedded items of coded information. For example, the first digit could represent cost category or price category information on the program being received while the last digit of the program identification number could be used to identify the address of the external code to be utilized to decode this particular program. The incorporation of the price category digit into the program identification code is intended primarily for use in on-site billing situations such as might be appropriate in a motel or hospital or a video tape rental location. It is the overall program identification number, in this case 8252, which would be written by the microprocessor in the removable memory module 26 to indicate that the program was watched by the consumer. The central billing system would know from the program identification number what the title of the program was and the exact price to be charged to the subscriber for viewing that program. The next digit in the code, in this case the 1, is used to represent the actual segment of the program watched. Thus programs would preferentially be divided into a number of segments and the viewer would only be billed for those segments which were watched by that viewer. The succeeding segment of the code, i.e. the number 17, would be a check sum Which is the error check number generated by the system for use in the error check at program step 56. In this simplified case this error check sum represents the sum of the program identification numbers 8, 2, 5, and 2, which added together equal 17. A more complicated error check algorithm could of course be utilized, although a simple system may be more reliable. The next succeeding three digits of the broadcast code, in this case 110, allows a unique code to be assigned to the local distributor or station from which the program is being broadcast. This allows the broadcaster to place a unique code on the broadcast signal. It is intended that this code also be written onto the removable memory module 26 so that the broadcasting station can be given the proper credit for the viewer watching that particular station if more than one station is utilizing the system and broadcasting into the same competitive viewing area. The final three digits of the program broadcast code, in this case, 230, represent the parental control code. This code designates the rating of the program in terms of categories such as sexual content, level of violence, or political controversy. This code is the one intended to be compared to the output of the control switches 32 to determine whether the selection of the content of the program has been made by a viewer.

Once the broadcast code is contained in the microprocessor memory, and once the synchronization has occurred at step 58, the program takes the digit from the broadcast code representing the external code address and identifies and obtains the code from that address at program steps 60 through 64. The external code is transferred into memory. In this example assume that the external code is 282.

The program next makes the determination of whether the user has selected that class of program input. In the example described herein, the program would branch to determine if the class of programs assigned class category 230 have been selected by the viewer. Assuming that this program category is acceptable to the viewer, the program then would proceed to step 70 to add the internal and external codes. If the external code is, for example, a number equal in length to the internal code, such as the number 217, the addition of the internal and external codes would usually yield a numeral of the same number of digits, in this case i.e. 499. In the particular circumstance described in which three digit codes are used, the system code, i.e. the number 499, would be common to all of the decoders used in the system for a given viewing time period. The external code 282 would be unique only to the particular decoder 10 which has therein an internal code 217. A decoder 10 which has therein an internal code 216 would require an external code 283 etc. Obviously other more complex methods of combining an internal and an external code together to make a predictable system code are possible within the workings of this system, although simple addition should often prove satisfactory.

Once the system code is generated, the steps 72 through 78 are followed to generate a numerical sequence. For purposes of this example, assume that the system code 499 is then multiplied by a selected and common digit of the broadcast code. One or more multiplications could be performed depending on the size of the numeral which it is desired to create. Assume for the purposes of this example that the system code, 499 is multiplied by 825, a portion of the program identification code, and also by a numeral 7, obtained from the error checking number, to yield an enlarged multiplicand of the system code of 2881725. The purpose of this numerical expansion of the system code is to allow for a larger number to be utilized in the numerical sequence generation to make the creation of a descrambler not dependent on the system code a much more sophisticated and technologically complex project.

This multiplicand is then operated on by a fixed number utilized by all of the decoders in the system to expand this multiplicand further to generate the numerical sequence. Assume here that the fixed number in this instance is 4598123. Assume that the transformation in this simple example is a simple digit shift of the fixed number around a digit selected by the last digit of the expanded system code. The last digit is 5 and if the fifth least significant digit of the fixed number is shifted to the most significant, the transformed fixed number is 9812345.

Multiplying the transformed fixed number times each digit of the expanded system code yields a numerical sequence as follows:

9812345.times.2=19624690

9812345.times.8=78498760

9812345.times.1=98123450

etc.

This sequence of multiple digit numbers is transferred to the D/A converter 34 in appropriate four or eight bit words and this sequence is thus converted to an analog signal. The analog signal is the descrambling signal which is applied to the mixer 20 to descramble the broadcast signal.

Thus, in essence, a pay per view broadcast television system utilizing the present system would work as follows. Each month, or other preselected time period, the central billing facility would send each subscriber a removable memory module in the form of an EEPROM 26. That EEPROM would be usable only with the decoder 10 previously provided to the subscriber. Since the decoders 10 are completely ineffectual without the appropriate removable memory module 26, the decoders 10 could be provided free of charge to potential subscribers. The viewer can then view any show which he may desire by inserting the removable memory module 26 into his decoder 10. The program signal is then properly decoded and the viewer can watch the program. At various points during the program, the microprocessor 22 writes the program identification code or number onto to the EEPROM 26 to record the viewer's watching of the program. At he end of the month, the viewer would receive a new removable memory module in the mail together with suitable packing or mailing information to send the previous month's EEPROM 26 back to the central billing facility. The viewer would then insert the second EEPROM 26 in the decoder to enable his system to work during the succeeding month. At the central billing facility the EEPROM submitted by the user would be read and a bill generated depending on the viewership and transmitted to the subscriber. The subscriber would only receive the appropriate EEPROM 26 for future months in the event that his account is paid up to date. At any point if his payment history becomes unacceptable, it is merely necessary not to send him a new EEPROM 26 such that he will be unable to view descrambled progamming when the system code is next changed.

In this fashion a highly reliable and technically sophisticated scrambling system is provided which has high security. It will be very difficult for unauthorized individuals to construct decoders which could reliably decode the descrambled broadcast signal created by the present system since such a decoder would only be effective if the system code was known, and the system code is intended to be changed monthly and kept confidential. The EEPROMs 26 are also secure since there is little incentive for anyone to attempt theft of the modules because they will not work in any decoder 10 other than the one for which they have specifically been coded. Thus the system provides a high level of security heretofore unprecedented while also providing a system which is simple to implement and whose hardware is inexpensive and convenient. The system does require some very minimal amount of participation by the viewer but it should be extremely easy for the viewer to do the necessary activities, i.e., plug in the EEPROM 26 and remove it at the end of the month and this should not be a significant problem for implementation of the system.

While the use of a periodically replaced billing module is an effective system for controlling the security and for appropriately billing for viewing of time-dependent broadcast signals, such as conventional over-the-air broadcasts or cable broadcasts, it has some limitations when the program material is to be distributed in a format which is not time-dependent, such as when the program material is distributed on video cassette tape for play on a home VCR. In such an instance, it is helpful if the system constructed in accordance with the present invention has built into it an option to provide for time-independent viewing of the material which has been provided, while still providing appropriate security, and still billing the viewer on a pay-per-use basis. In order to accommodate these objectives, several variations need to be built into the design and execution of a removable memory module constructed in accordance with the present invention. In essence, such variations must allow the material distributed in fixed format, of which video cassette tape programming will hereafter be used as the example, over a time period which may extend through many cycles of the billing modules which might be used for periodic, for example monthly, billing of users for live programming.

To help illustrate how this might be accomplished, FIG. 3 is intended to be an illustrative schematic view of a memory allocation map of a removable memory module design for this option. This particular memory module 26 is organized into blocks, separately addressable, of eight bytes each. In the example of FIG. 3, each byte is occupied by a decimal digit, to illustrate how this could function, although the actual memory values would be stored as binary coded values. The microprocessor 22 of the decoder 10 would, of course, be appropriately programmed to recognize that the information and memory portions of the memory module 28 are organized in this fashion and would hence address the blocks of memory in such eight byte blocks.

Within the removable memory module 26, at low address locations therein, are a series of external code blocks indicated at 102, 104, 106, 108, 110, 112, 114 and 116. Thus, in the removable memory module as indicated in FIG. 3, the lower locations of memory have been allocated specifically for the storage of a series of selectable external codes. In this example, a prefix has been assigned to each eight byte block to indicate the nature of the information contained in that block. In the example of FIG. 3, the prefix "3" indicates the presence of a time-dependent external code. The prefix "4" indicates the presence of a non-time-dependent external code. The prefix "1" indicates a pre-filled or unavailable portion of memory. The prefix "0" indicates an available portion of memory into which billing information may be entered. Thus, memory blocks 102-108 contain time-dependent external codes, numbered by their second digit 0 to 3, while the memory blocks 110 to 116 contain time-independent external codes, also numbered by their second digit 0 to 3. A series of memory blocks 120 to 134 have been preset with a "1" in their first digit so that those locations are pre-filled. Memory locations 136 and 138 have been written into. Memory location blocks 140-150 are unwritten and available as indicated by the "0" prefix.

To effectuate this alternative, the program sequence of FIG. 2 would have to be altered at step 64 when the program reads the external code and stores the results. The program would first determine, presumably from the broadcast code, whether the program material has been encoded with a time-dependent or a time-independent external code. Based on the indication in the broadcast code contained on the input program signal, the program would then either select a time-independent external code, such as the ones with the prefix "3", or would select a time-independent code with the prefix "4", in the example of FIG. 3. There would often be a provision for more than one time- dependent or time-independent external code, which might be selected by different programming material or by different program sources, so there would be, as in FIG. 3, a second digit prefix indicating the number of the external code stored on the memory module 26. The decoding of the broadcast signal would proceed in the same fashion, regardless of the source of the program material. The selection of the proper external code would be made based on information contained in that broadcast code. The properly identified external code would then be read from the billing module, and combined with the internal code and used to generate a system code which can properly descramble the input broadcast signal. Thus, the program material, whether coming from over the air or distributed by video cassette tape, could be viewed in an unscrambled fashion on the home viewer.

One other alternative appropriate for use with taped material, although slightly lower in security, would be for the taped material to be encoded only with an internal code particularized to the decoder at a particular user location. In such an instance, the program for the decoder would be instructed, assuming that the broadcast code identifies the input broadcast signal as coming from a tape source, to not read an external code but merely descramble the input broadcast signal with a numerical value generated solely from the internal code. Such a system would still have relatively high security in that tapes could only be viewed on the particular decoder 10 for which the scrambled VCR tape had been properly encoded.

Since this system would require a particular tape encryption for a particular home decoder, which could be burdensome to implement, a middle approach might be to dictate for the entire billing system that the system code is fixed and not changeable for tape distributed broadcast. Using this approach, the system code for taped signals would be fixed indefinitely and, therefore, the internal and external codes could both be used to generate that signal, and the memory modules 26, could be distributed with an external code to be used for tape signals that could be used by users indefinitely.

Regardless of whether time-dependent or time-independent external codes are utilized, if the user is to be charged on a pay-per-use basis for taped program viewing, there must be provisions in the memory module 26 for writing information as to which taped programs are viewed. It is for this function that the rest of the memory locations in the memory module 26 are dedicated. Since, for practical reasons, most of the memory modules 26 should be of identical size, even though it is appropriate to grant some users more credit on the system than others, it is appropriate and useful therefore to customize the available amount of credit on each memory module 26 to a particular user. This may be done in two fashions. In the memory module 26 of FIG. 3, this will be done by a pre-filling of memory module locations available for writing billing information. In this example, eight byte memory locations preceded by the prefix "1" will be recognized by the software associated with the microprocessor 22 of the decoder 10 as being not available for the insertion of billing information, while eight byte memory locations preceded by the prefix "0" are available for the entering of billing information. As can be seen in the example of FIG. 3, the memory locations 120-134 have been pre-filled with the prefix "1" indicating that they are not available. Therefore, the program controlling the operation of the microprocessor 26, when writing billing information from the decoder into the memory module 26, will write the billing information and the next highest address available, as indicated by a "0" prefix. Thus, in the illustration of FIG. 3, locations 120-134 have been pre-filled with the prefix "1" making them unavailable at anytime. Memory locations 136-138 are locations which were initially available for billing information, and into which the system has coded exemplary information about the broadcast which has been viewed by the viewer. In writing each of these address locations, the program actually changes the prefix from a "0" to a "1" indicating that the location is now filled. When the next program is watched by the viewer for which billing information is appropriate, the program will write into billing location 140, which is the next highest available address left on the memory module 26. It can readily be seen from this example that the amount of viewing which can be allowed to the viewer is dependent on the ratio between the pre-filled and non-pre-filled portion of the memory locations on the memory module 26. In other words, viewers whose credit or usage is high would have very few of the memory locations pre-filled, while users who are new to the system or who have more marginal credit would have the majority of memory locations in their memory module 26 pre-filled to prevent over-use of the system. In any event, when all of the available memory locations are filled, the memory module 26 would therefore have no available locations and the program controlling the operation of the microprocessor 22 would cease description of the broadcast signal. In other words, when the credit is used up, the viewer no longer has access to the scrambled broadcast signal. Since the amount of available memory depends on the number of address locations available, the rate at which the address locations are filled can be varied depending on the relative cost of the program material. For example, more expensive programs can have broadcast codes which require the use of two or more memory locations to contain the appropriate billing information. Or, depending on the broadcast code, the program can be instructed to write to the billing module and utilize address locations more quickly or less quickly depending on the cost of the program to the viewer.

If the memory map of the memory module is indeed constructed as illustrated in FIG. 3, it then makes possible several other options as to methods of providing credit to customers. Since the amount of credit is now dependent upon the available memory space in the memory module 26, it may be appropriate in some circumstances to authorize increases in credit to the customer without the necessity for actually returning the memory module 26 to the central billing authority each time. For example, it would be possible to construct a numerical keypad on the exterior of the decoder unit 10. Then, once the user has exhausted all available credit contained in the non-filled portion of his/her memory module 26, and the system quits descrambling, the user would then contact the billing authority, perhaps by telephone. The user could then secure extra credit, for example by making a credit card charge over the telephone, and the central authority would then desire to quickly extend credit to the user. This could be done by providing a routine resident in the decoder, and, of course, effectuated by the microprocessor 22, to re-write selected memory blocks of the memory module 26 if actuated by the presentation of a particular numeric code. Thus, when the user telephones the central billing authority for additional credit, the user would be given a numerical code sequence which the user could then input on the numeric keypad provided on the decoder 10 specifically for that purpose. The numeric code sequence which instructs the microprocessor to add viewing authorization should itself be enciphered with the internal or external code