Methods and systems for re-securing a compromised channel in a satellite signal distribution environment

• US 9,113,226 B2
• Filed: 07/20/2010
• Issued: 08/18/2015
• Est. Priority Date: 12/21/2009
• Status: Active Grant

• Current Assignee: BCE Incorporated
• Original Assignee: BCE Incorporated
• Inventors: Popa, Ovidiu Octavian, Ishankov, Alexander, Dagenais, Alan, Andriano, Louie, Becic, Bratislav, Dinesen, Tim
• Primary Examiner(s): Chao, Michael
• Assistant Examiner(s): Gao, Shu Chun
• Application Number:
  US13/517,498
• Publication Number:
  US 20120257748A1
• Time in Patent Office: 1,855 Days
• Field of Search: 380/200, 380/255, 380/259, 380/277, 725/25
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/6143 involving transmission via a satellite
• CPC Class Codes: H04N 21/6193 involving transmission via a satellite arrangements for data linking, networking or transporting, or for controlling an end to end session in a satellite broadcast system H04B7/18526
• CPC Class Codes: H04N 21/64715 Protecting content from unauthorized alteration within the network verifying the information received for network security in communication control or processing H04L63/12; integrity in wireless network security H04W12/10
• CPC Class Codes: H04N 21/64723 Monitoring of network processes or resources, e.g. monitoring of network load traffic related reporting in data switching networks H04L43/062

Abstract

A method implemented by a set top box that encrypts communications for a channel stacking switch (CS) using a public key of the CSS, the method comprising: obtaining a message from a head end; extracting electronic counter measure (ECM) data from the message; sending the ECM data to the CSS; receiving, in response to the sending, a new public key of the CSS; encrypting communications for the CSS using the new public key of the CSS. Also, a method for implementation by a CSS, comprising: maintaining a private key and a public key; obtaining ECM data sent by a set top box in communication with the CSS; obtaining an identifier of the CSS; formulating a new public key based on the private key, the identifier and the ECM; rendering the new public key available to the set top box.

Claims

1. A method for implementation by a channel stacking switch, comprising:

maintaining a private key and a public key;

obtaining electronic counter measure (ECM) data sent by a set top box in communication with the channel stacking switch;

obtaining an identifier of the channel stacking switch;

formulating a new public key based on the private key, the identifier and the ECM data;

rendering the new public key available to the set top box.

2. The method defined in claim 1, further comprising managing a memory in which the private key, the public key and the new public key are stored.

3. The method defined in claim 2, further comprising replacing the public key with the new public key in the memory.

4. The method defined in claim 1, further comprising carrying out a pseudonymous signature scheme to formulate the new public key.

5. The method defined in claim 1, further comprising, prior to obtaining the ECM data, receiving a message from a head end and forwarding the message to the set top box, the message comprising the ECM data.

6. The method defined in claim 1, wherein the identifier of the channel stacking switch comprises a hardware identifier.

7. The method defined in claim 1, further comprising decrypting data received from the set top box using the private key.

8. The method defined in claim 7, wherein prior to obtaining the ECM data, at least some of the data received from the set top box is encrypted using the public key and after rendering the new public key available to the set top box, at least some of the data received from the set top box is encrypted using the new public key.

9. A channel stacking switch, comprising:

a memory configured to maintain a private key and a public key;

a communications interface configured to communicate with a set top box over a communication channel and also configured to receive data sent from a head end over a satellite link;

a processing entity configured to obtain via the communication interface electronic counter measure (ECM) data sent by the set top box, obtain an identifier of the channel stacking switch;

formulate a new public key based on the private key, the identifier and the ECM data and send the new public key to the set top box.