Conditional access system and method for prevention of replay attacks
View Patent ↗In a conditional access system, a headend transmits content to one or more receivers in encrypted transport streams. The system provides a multi-layer security architecture, rendering the system resistant to key replay attacks; if one layer is circumvented, subsequent layers remain intact. A first layer prevents unencrypted keys from being recorded by shielding the unencrypted keys from users and encrypting the path from the receiver's conditional access module to the transport decryption module; a second layer prevents a key recorded on one receiver from being played back to the transport decryption module on a second receiver; a third layer prevents a user from decrypting transport streams without the encryption module by encrypting the stream a second time prior to being passed through any user-accessible memory or processor. Event tables are transmitted with the transport stream, either unencrypted for immediate use or encrypted, to prevent unauthorized use.
1. A method, comprising:
creating, at a headend, an event table for a corresponding transport stream, the event table comprising a location and a type of one or more start codes within the transport stream;
encrypting the transport stream prior to transmission of the transport stream;
transmitting the encrypted transport stream with the event table from the headend to at least one receiver among a plurality of receivers.
2. The method of claim 1 , further comprising:
encrypting the event table prior to transmission with the encrypted transport stream.
3. The method of claim 1 , further comprising:
storing the encrypted transport stream transmitted from the headend at the at least one receiver; and
encrypting, at the at least one receiver, the transport stream so that a doubly encrypted transport stream is stored on a storage medium on or accessible to the receiver.
4. A conditional access system resistant to replay attacks, comprising:
a headend;
a plurality of receivers;
an event table creation subsystem, at the headend, that creates an event table for a corresponding transport stream, the event table comprising a location and a type of one or more start codes within the transport stream;
encrypting the transport stream prior to transmission of the transport stream;
a transport stream transmission subsystem that transmits the encrypted transport stream from the headend to at least one receiver among the plurality of receivers;
an event table transmission subsystem that transmits the event table with the transport stream to the at least one receiver.
5. The system of claim 4 , wherein the event table encryption subsystem encrypts the event table prior to transmission with the encrypted transport stream.
6. The system of claim 4 , further comprising:
a transport stream storage subsystem that stores the encrypted transport stream transmitted from the headend at the at least one receiver; and
a transport stream double encryption subsystem, at the at least one receiver, that encrypts the transport stream so that a doubly encrypted transport stream is stored on a storage medium on or accessible to the receiver.
7. A non-transitory computer-readable medium carrying one or more sequences of instructions for a digital video recorder, which instructions, when executed by one or more processors, cause the one or more processors to perform a method, comprising:
creating, at a headend, an event table for a corresponding transport stream, the event table comprising a location and a type of one or more start codes within the transport stream;
encrypting the transport stream prior to transmission of the transport stream;
transmitting the encrypted transport stream with the event table from the headend to at least one receiver among a plurality of receivers.
8. The non-transitory computer-readable medium of claim 7 , further comprising:
encrypting the event table prior to transmission with the encrypted transport stream.
9. The non-transitory computer-readable medium of claim 7 , further comprising:
storing the encrypted transport stream transmitted from the headend at the at least one receiver; and
encrypting, at the at least one receiver, the transport stream so that a doubly-encrypted transport stream is stored on a storage medium on or accessible to the receiver.