Methods and systems for re-securing a compromised channel in a satellite signal distribution environment
A method implemented by a set top box that encrypts communications for a channel stacking switch (CS) using a public key of the CSS, the method comprising: obtaining a message from a head end; extracting electronic counter measure (ECM) data from the message; sending the ECM data to the CSS; receiving, in response to the sending, a new public key of the CSS; encrypting communications for the CSS using the new public key of the CSS. Also, a method for implementation by a CSS, comprising: maintaining a private key and a public key; obtaining ECM data sent by a set top box in communication with the CSS; obtaining an identifier of the CSS; formulating a new public key based on the private key, the identifier and the ECM; rendering the new public key available to the set top box.
1. A method implemented by a set top box that encrypts communications for a channel stacking switch connected to a satellite signal receiver of a satellite signal distribution network using a public key of the channel stacking switch, the method comprising:
obtaining a message from a head end of the satellite signal distribution network;
extracting electronic counter measure (ECM) data from the message;
sending the ECM data to the channel stacking switch;
receiving, in response to the sending, from the channel stacking switch a new public key of the channel stacking switch;
encrypting communications destined for the channel stacking switch using the new public key of the channel stacking switch.
2. The method defined in claim 1 , wherein the message is obtained from the head end via the channel stacking switch.
3. The method defined in claim 1 , wherein the ECM data is a 32 bit integer.
4. A method for re-securing communications in a satellite signal distribution network, comprising:
detecting an actual or suspected breach of security of a channel used by a particular channel stacking switch to communicate with one or more set top boxes;
obtaining electronic counter measure (ECM) data for the particular channel stacking switch;
sending the ECM data to the particular channel stacking switch;
commanding a key exchange between the channel stacking switch and at least one of the one or more set top boxes.
5. The method defined in claim 4 , wherein the actual or suspected breach of security involves a particular set top box from the one or more set top boxes, the method further comprising packaging the ECM data in a message sent to the particular set top box, for transmission to the particular channel stacking switch over the channel.
6. The method defined in claim 5 , wherein message is sent to the particular set top box via a satellite link involving the particular channel stacking switch.
7. The method defined in claim 4 , wherein obtaining the ECM data comprises consulting a memory pre-populated with suitable ECM data values.
8. The method defined in claim 4 , wherein the ECM data is a 32-bit integer.
9. The method defined in claim 4 , wherein commanding a new key exchange comprises sending a command to the at least one of the one or more set top boxes.
10. The method defined in claim 4 , wherein the key exchange causes the at least one of the one or more set top boxes to receive from the particular channel stacking switch a new public key associated with the particular channel stacking switch to replace a public key previously associated with the particular channel stacking switch.