Methods and systems for re-securing a compromised channel in a satellite signal distribution environment

• US 9,635,434 B2
• Filed: 06/22/2015
• Issued: 04/25/2017
• Est. Priority Date: 12/21/2009
• Status: Active Grant

• Current Assignee: BCE Incorporated
• Original Assignee: BCE Incorporated
• Inventors: Popa, Ovidiu Octavian, Ishankov, Alexander, Dagenais, Alan, Andriano, Louie, Becic, Bratislav, Dinesen, Tim
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Gao, Shu Chun
• Application Number:
  US14/745,894
• Publication Number:
  US 20150319476A1
• Time in Patent Office: 673 Days
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/6143 involving transmission via a satellite
• CPC Class Codes: H04N 21/6193 involving transmission via a satellite arrangements for data linking, networking or transporting, or for controlling an end to end session in a satellite broadcast system H04B7/18526
• CPC Class Codes: H04N 21/64715 Protecting content from unauthorized alteration within the network verifying the information received for network security in communication control or processing H04L63/12; integrity in wireless network security H04W12/10
• CPC Class Codes: H04N 21/64723 Monitoring of network processes or resources, e.g. monitoring of network load traffic related reporting in data switching networks H04L43/062

Abstract

A method implemented by a set top box that encrypts communications for a channel stacking switch (CS) using a public key of the CSS, the method comprising: obtaining a message from a head end; extracting electronic counter measure (ECM) data from the message; sending the ECM data to the CSS; receiving, in response to the sending, a new public key of the CSS; encrypting communications for the CSS using the new public key of the CSS. Also, a method for implementation by a CSS, comprising: maintaining a private key and a public key; obtaining ECM data sent by a set top box in communication with the CSS; obtaining an identifier of the CSS; formulating a new public key based on the private key, the identifier and the ECM; rendering the new public key available to the set top box.

Claims

1. A method implemented by a set top box that encrypts communications for a channel stacking switch connected to a satellite signal receiver of a satellite signal distribution network using a public key of the channel stacking switch, the method comprising:

obtaining a message from a head end of the satellite signal distribution network;

extracting electronic counter measure (ECM) data from the message;

sending the ECM data to the channel stacking switch;

receiving, in response to the sending, from the channel stacking switch a new public key of the channel stacking switch;

encrypting communications destined for the channel stacking switch using the new public key of the channel stacking switch.

2. The method defined in claim 1, wherein the message is obtained from the head end via the channel stacking switch.

3. The method defined in claim 1, wherein the ECM data is a 32 bit integer.

4. A method for re-securing communications in a satellite signal distribution network, comprising:

detecting an actual or suspected breach of security of a channel used by a particular channel stacking switch to communicate with one or more set top boxes;

obtaining electronic counter measure (ECM) data for the particular channel stacking switch;

sending the ECM data to the particular channel stacking switch;

commanding a key exchange between the channel stacking switch and at least one of the one or more set top boxes.

5. The method defined in claim 4, wherein the actual or suspected breach of security involves a particular set top box from the one or more set top boxes, the method further comprising packaging the ECM data in a message sent to the particular set top box, for transmission to the particular channel stacking switch over the channel.

6. The method defined in claim 5, wherein message is sent to the particular set top box via a satellite link involving the particular channel stacking switch.

7. The method defined in claim 4, wherein obtaining the ECM data comprises consulting a memory pre-populated with suitable ECM data values.

8. The method defined in claim 4, wherein the ECM data is a 32-bit integer.

9. The method defined in claim 4, wherein commanding a new key exchange comprises sending a command to the at least one of the one or more set top boxes.

10. The method defined in claim 4, wherein the key exchange causes the at least one of the one or more set top boxes to receive from the particular channel stacking switch a new public key associated with the particular channel stacking switch to replace a public key previously associated with the particular channel stacking switch.