Apparatus and method having broadcast key rotation

1. A method for decrypting media data, comprising:

receiving, by a receiver, an encrypted segment of media data and an encrypted segment key over a unidirectional over-the-air (OTA) broadcast channel;

providing an attestation request to an authenticator, wherein the authenticator is within the receiver;

receiving an attestation response from the authenticator based on an interaction with authentication hardware to authenticate a user of the receiver; and

decrypting, after receiving the attestation response, the encrypted segment of media data using a segment key to generate a decrypted segment of media data, wherein the segment key is based on the encrypted segment key.

2. The method of claim 1 , further comprising:

providing the decrypted segment of media data for presentation to the user.

3. The method of claim 1 , wherein the interaction with the authentication hardware is at the receiver, and includes receiving a personal identification number (PIN) from the user.

4. The method of claim 1 , wherein the encrypted segment of media data is received with the encrypted segment key.

5. The method of claim 1 , further comprising:

receiving a second encrypted segment of media data and a second encrypted segment key over the OTA broadcast channel; and

decrypting, after receiving the attestation response, the second encrypted segment of media data using a second segment key, wherein the second segment key is based on the second encrypted segment key.

6. The method of claim 5 , wherein the second encrypted segment of media data is received with the second encrypted segment key.

7. A receiver, comprising:

means for receiving an encrypted segment of media data and an encrypted segment key over a unidirectional over-the-air (OTA) broadcast channel;

means for providing an attestation request to an authenticator, wherein the authenticator is within the receiver;

means for receiving an attestation response from the authenticator, wherein the attestation response is based on an interaction with authentication hardware to authenticate a user of the receiver; and

means for decrypting, after receiving the attestation response, the encrypted segment of media data using a segment key to generate a decrypted segment of media data, wherein the segment key is based on the encrypted segment key.

8. The receiver of claim 7 , further comprising:

means for providing the decrypted segment of media data for presentation to the user.

9. The receiver of claim 7 , wherein the authentication hardware includes a token that is verified by an authenticator.

10. The receiver of claim 7 , wherein the authentication hardware includes an iris scanner for scanning an iris of the user.

11. The receiver of claim 7 , wherein the authentication hardware includes a fingerprint scanner for scanning a fingerprint of the user.

12. The receiver of claim 7 , wherein the interaction with authentication hardware includes receiving a personal identification number (PIN) from the user.

13. The receiver of claim 7 , wherein the encrypted segment of media data is received with the encrypted segment key.

14. A receiver, comprising:

a processor configured to:

receive an encrypted segment of media data and an encrypted segment key over a unidirectional over-the-air (OTA) broadcast channel;

provide an attestation request to an authenticator, wherein the authenticator is within the receiver;

receive an attestation response from the authenticator based on an interaction with authentication hardware to authenticate a user of the receiver; and

decrypt, after receiving the attestation response, the encrypted segment of media data using a segment key to generate a decrypted segment of media data, wherein the segment key is based on the encrypted segment key.

15. The receiver of claim 14 , wherein the processor is further configured to:

provide the decrypted segment of media data for presentation to the user.

16. The receiver of claim 14 , wherein the authentication hardware includes a token that is verified by an authenticator.

17. The receiver of claim 14 , wherein the authentication hardware includes an iris scanner for scanning an iris of the user.

18. The receiver of claim 14 , wherein the authentication hardware includes a fingerprint scanner for scanning a fingerprint of the user.

19. The receiver of claim 14 , wherein the interaction with authentication hardware includes receiving a personal identification number (PIN) from the user.

20. The receiver of claim 14 , wherein the encrypted segment of media data is received with the encrypted segment key.

21. A non-transitory computer-readable medium, comprising:

code for causing a computer to receive an encrypted segment of media data and an encrypted segment key over a unidirectional over-the-air (OTA) broadcast channel;

code for causing the computer to provide an attestation request to an authenticator, wherein the authenticator is within the computer;

code for causing the computer to receive an attestation response from the authenticator based on an interaction with authentication hardware to authenticate a user of the computer; and

code for causing the computer to decrypt, after receiving the attestation response, an encrypted segment of media data using a segment key to generate a decrypted segment of media data, wherein the segment key is based on the encrypted segment key.

22. The computer-readable medium of claim 21 , further comprising:

code for causing the computer to provide the decrypted segment of media data for presentation to a user.

23. The computer-readable medium of claim 21 , wherein the encrypted segment of media data is received with the encrypted segment key.