System for denying access to content generated by a compromised off line encryption device and for conveying cryptographic keys from multiple conditional access systems
View Patent ↗A method for forwarding messages containing cryptographic keys from a conditional access system that controls a population of set-top boxes to an encryption renewal system. The method includes storing a fictitious address of a virtual set-top box; generating a message based on the fictitious address, the message containing a cryptographic key; and forwarding the message to the fictitious address of the virtual set-top box. The encryption renewal system has information regarding the virtual set-top box, and is the recipient of the message. In addition, the encryption renewal system is for controlling access to pre-encrypted content generated by an encryption device. The system includes software instructions for receiving a request to retrofit an entitlement control message that allows a home device to access pre-encrypted content; and software instructions for retrofitting the entitlement control message only after verifying that the pre-encrypted content was generated prior to or contemporaneous with an authorized timestamp.
1. A method for use in cable systems, the method for forwarding messages containing cryptographic keys from multiple conditional access systems that control a population of set-top boxes to an encryption renewal system, the method comprising:
defining a fictitious address for a single virtual set-top box, wherein said fictitious address is used by said multiple conditional access systems to address said encryption renewal system;
storing said fictitious address at each of said multiple conditional access systems;
generating a unique key within each of said multiple conditional access systems as a function of the identity of each particular multiple conditional access system;
encrypting said unique key for each of said multiple conditional access systems;
encapsulating each of said encrypted unique keys in an encoded message; and
forwarding the encoded message to said fictitious address.
2. The method of claim 1 further comprising receiving the encoded message by the encryption renewal system which has information regarding the fictitious address.
3. The method of claim 1 further comprising deriving by the encryption renewal system the unique key from the encoded message.
4. The method of claim 1 further comprising forwarding to a subscriber set-top box, a control message containing information having the unique key for allowing the set-top box to decrypt pre-encrypted content for a designated duration.