Signal security in a satellite signal distribution environment

• US 9,843,773 B2
• Filed: 09/12/2014
• Issued: 12/12/2017
• Est. Priority Date: 07/20/2009
• Status: Active Grant

• Current Assignee: BCE Incorporated
• Original Assignee: BCE Incorporated
• Inventors: Popa, Ovidiu Octavian, Scrivens, Wayne, Ishankov, Alexander, Dagenais, Alan, Dinesen, Tim, Marusich, Peter
• Primary Examiner(s): HENDERSON, ESTHER BENOIT
• Application Number:
  US14/484,804
• Publication Number:
  US 20150010150A1
• Time in Patent Office: 1,187 Days
• Field of Search: None
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/6143 involving transmission via a satellite
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/162 Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing

Abstract

Certain embodiments provide a set top box, comprising: a processing entity configured to obtain data for a channel stacking switch, to obtain a security data element and to formulate a message for the channel stacking switch by combining the security data element with the data; a communications interface configured to send the message to channel stacking switch. Other embodiments provide a channel stacking switch, comprising: a communication interface configured to receive a message from a set top box; a processing entity configured to determine whether or not the message is legitimate and to take an action that depends on whether or not the message is legitimate. Still further embodiments provide a satellite signal receiving system comprising a channel stacking switch and at least one set top box in secure communication with the channel stacking switch.

Claims

1. A method implemented by a channel stacking switch (CSS), comprising:

receiving, by the CSS, a message from a set top box (STB) over a communications link;

processing the message to determine whether or not the message is legitimate and obtain data destined for the CSS from the legitimate message;

taking an action in response to processing the message, the action comprising in response to the determination that the message is legitimate, mapping, by the CSS, a satellite transponder channel requested through the data destined for the CSS to a central frequency of the STB.

2. The method defined in claim 1, wherein said processing the message comprises carrying out an attempt to decrypt the message using a key, wherein the message received by the CSS is determined to be legitimate if the attempt is successful and not legitimate otherwise.

3. The method defined in claim 2, further comprising accessing a memory to obtain the key.

4. The method defined in claim 3, further comprising sending the key to the STB over the communication link prior to receiving the message.

5. The method defined in claim 4, wherein said sending is in response to receipt of a key request message from the STB over the communication link.

6. The method defined in claim 5, further comprising sending a trigger to the STB to cause issuance of the key request message by the STB.

7. The method defined in claim 5, wherein the key comprises an identifier of the CSS.

8. The method defined in claim 3, the key being a decryption key, the method further comprising sending an encryption key different from the decryption key to the STB over the communication link prior to receiving the message.

9. The method defined in claim 8, wherein said sending is in response to receipt of a key request message from the STB over the communication link.

10. The method defined in claim 9, further comprising sending a trigger to the STB to cause issuance of the key request message by the STB.

11. The method defined in claim 9, wherein the encryption key is a public key of the CSS and wherein the decryption key is a private key of the CSS.

12. The method defined in claim 9, wherein said sending comprises encrypting the encryption key with a second encryption key.

13. The method defined in claim 12, further comprising accessing the memory to obtain the second encryption key.

14. The method defined in claim 13, further comprising storing the second encryption key in the memory further to receipt of the second encryption key from the STB over the communication link.

15. The method defined in claim 14, wherein the second encryption key is a STB public key.

16. The method defined in claim 14, wherein the second encryption key comprises part of the key request message.

17. The method defined in claim 1, wherein the message received by the CSS is determined to be legitimate if the originator of the message is successfully validated and not legitimate otherwise.

18. The method defined in claim 17, wherein validating the originator of the message comprises consulting a memory that stores a list of authorized set top box identifiers, wherein the originator of the message is successfully validated if the identifier is on said list.

19. The method defined in claim 18, further comprising receiving the list from a head end via a satellite feed unit.

20. The method defined in claim 17, wherein validating the originator of the message comprises accessing a memory storing a list of unauthorized set top box identifiers, wherein the originator of the message is successfully validated if the identifier is not on said list.

21. The method defined in claim 20, further comprising receiving the list from a head end via a satellite feed unit.

22. The method defined in claim 1, wherein the data destined for the CSS contains a tuning request from the STB.

23. The method defined in claim 22, wherein the tuning request specifies the satellite transponder channel, and wherein serving the tuning request comprises controlling a satellite feed unit to isolate from an ambient signal a wideband satellite signal, isolating the desired satellite transponder channel from the wideband satellite signal and frequency translating the desired satellite transponder channel into the user band assigned to the STB.

24. The method defined in claim 23, wherein controlling the satellite feed unit comprises setting a polarization of the wideband satellite signal.

25. The method defined in claim 23, wherein controlling the satellite feed unit comprises setting a frequency range of the wideband satellite signal.

26. The method defined in claim 1, wherein if the message is not legitimate, said action comprises returning an error message to the STB.

27. A channel stacking switch, comprising:

a communication interface configured to receive a message from a set top box (STB);

a processing entity; and

at least one non-transitory computer memory comprising instructions executable by the processing entity to;

determine whether or not the message is legitimate, and

take an action in response to processing the message, the action comprising in response to the determination that the message is legitimate, mapping a satellite transponder channel requested through the data destined for the channel stacking switch to a central frequency of the STB.

28. A non-transitory computer-readable storage medium storing instructions for execution by a channel stacking switch (CSS), wherein execution of the instructions by the CSS causes the CSS to:

be attentive to receipt of a message from a set top box (STB) over a communications link,

process the message to determine whether or not the message is legitimate and obtain data destined for the CSS from the legitimate message;

take an action in response to processing the message, the action comprising in response to the determination that the message is legitimate, mapping, by the CSS, a satellite transponder channel requested through the data destined for the CSS to a central frequency of the STB.

29. A satellite signal receiving system comprising a channel stacking switch (CSS) and at least one set top box in secure communication with the channel stacking switch,

wherein the CSS comprises:

a communication interface configured to receive a message from a set top box (STB);

a processing entity configured to;

determine whether or not the message is legitimate, and

take an action in response to processing the message, the action comprising in response to the determination that the message is legitimate, mapping a satellite transponder channel requested through the data destined for the channel stacking switch to a central frequency of the STB.