Apparatus for entitling remote client devices

• US 20030221100A1
• Filed: 03/06/2003
• Published: 11/27/2003
• Est. Priority Date: 05/24/2002
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Scientific-Atlanta Incorporated (Cisco Systems, Inc.)
• Inventors: Pinder, Howard G., Russ, Samuel H., Gaul, Michael A., Wasilewski, Anthony J.
• Granted Patent: US 7,181,010 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 12/2805 Home Audio Video Interoperability [HAVI] networks
• CPC Class Codes: H04N 21/234309 by transcoding between formats or standards, e.g. from MPEG-2 to MPEG-4 or from Quicktime to Realvideo conversion of standards in analog television systems H04N7/01
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/23608 Remultiplexing multiplex streams, e.g. involving modifying time stamps or remapping the packet identifiers
• CPC Class Codes: H04N 21/41265 having a remote control device for bidirectional communication between the remote control device and client device unidirectional remote control device H04N21/42204
• CPC Class Codes: H04N 21/42684 Client identification by a unique number or address, e.g. serial number, MAC address, socket ID network arrangements, protocols or services for addressing or naming H04L61/00
• CPC Class Codes: H04N 21/4344 Remultiplexing of multiplex streams, e.g. by modifying time stamps or remapping the packet identifiers
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/43637 involving a wireless protocol, e.g. Bluetooth, RF or wireless LAN [IEEE 802.11] arrangements for wireless networking or broadcasting of information in indoor or near-field type systems H04B10/114
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/472 End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content end-user interfaces for retrieving video data from a database G06F16/739; network services for supporting unicast streaming H04L65/612
• CPC Class Codes: H04N 21/47815 Electronic shopping payment schemes, payment architectures or payment protocols for electronic shopping systems G06Q20/12
• CPC Class Codes: H04N 21/482 End-user interface for program selection broadcast systems using EPGs H04H60/72
• CPC Class Codes: H04N 21/8586 by using a URL processing chained hypermedia data for information retrieval G06F16/94; information retrieval from the Internet by using URLs G06F16/955; URL in broadcast information H04H20/93; Web-based protocols H04L67/02
• CPC Class Codes: H04N 7/162 Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A server in a subscriber television network receives service instances from a headend of the subscriber television network. The server is adapted to encrypt according to an encryption scheme and re-transmit service instances to a client-receiver. The server reformats the service instance from a first format into a second format the client-receiver can access the service instance.

Claims

1. A method of providing content to a client-receiver in a local area network coupled to a headend of a subscriber television system, the method implemented in a web-server in the local area network, the web-server in communication with the headend and the client-receiver, the method comprising the steps of:

receiving at the web-server a plurality of streams of packets from the headend, wherein each packet includes a payload having content that is formatted according to a first protocol;

receiving at the web-server a request from a client-receiver in the local area network for a service made up of a specific stream of packets, wherein the request is a message that is formatted according to a second protocol;

determining at the web-server whether the client-receiver is entitled to receive the requested service; and

responsive to determining the client-receiver is entitled to receive the requested service, providing the requested service to the client-receiver, wherein the specific stream of packets of the requested service are included in the received plurality of streams of packets.

2. The method of claim 1, wherein the web-server is in a DSCT.

3. The method of claim 1, further including the steps of:

determining a device-type for the client-receiver;

using the device-type of the client-receiver to determine a second format protocol for the requested service; and

reformatting the content of the requested service from the first protocol to a second protocol, wherein the content of the requested service is provided to the client-receiver formatted according to the second protocol.

4. The method of claim 3, wherein the first protocol includes MPEG protocol.

5. The method of claim 3, wherein the second protocol is a Real Video protocol including a Real Video 8 protocol.

6. The method of claim 3, wherein the second protocol is a Windows Media Video protocol including a Windows Media Video 8 protocol and a Windows Media Video 9 protocol.

7. The method of claim 3, wherein the second protocol is a web-based protocol.

8. The method of claim 7, wherein the web-based protocol is at least one of the following protocols:

of H.323, MPEG-4, H.264, MPEG-2, Macromedia Flash, and Macromedia Shockwave.

9. The method of claim 3, further including the steps of:

decrypting the content of the requested service;

determining at the web-server an encryption scheme for the requested service; and

prior to the step of providing, encrypting the reformatted content.

10. The method of claim 9, further including the step of:

prior to the step of decrypting, determining at the web-server whether the web-server is entitled to access the requested service, wherein the content of the requested service is only decrypted when the web-server is entitled to access the requested service.

11. The method of claim 10, further including the steps of:

responsive to the web-server determining the web-server is not entitled to access the requested service, transmitting a request from the web-server to the headend of the subscriber television system for the web-server to access the requested service; and

receiving at the web-server authorization for the web-server to access the requested service instance.

12. The method of claim 1, further including the step of:

granting the client-receiver the authority to receive the requested service.

13. The method of claim 12, further including the step of:

receiving at the web-server authorization for the web-server to grant authority to the client-receiver to receive the requested service.

14. The method of claim 12, further including the steps of:

responsive to the web-server determining the web-server is not entitled to access the requested service, transmitting a request from the web-server to the headend of the subscriber television system for the web-server to access the requested service; and

receiving at the web-server authorization for the web-server to access the requested service instance.

15. The method of claim 1, prior to the step of providing the requested service, further including the steps of:

receiving at the web-server a message from the client-receiver, the message having device-type information of the client-receiver included therein;

determining from at least the device-type information of the client-receiver an encryption scheme for transmitting the requested service; and

implementing the encryption scheme to encrypt the requested service, wherein the provided requested service is encrypted in accordance with the determined encryption scheme.

16. The method of claim 1, prior to the step of providing the requested service, further including the steps of:

receiving at the web-server a message from the client-receiver, the message having device-type information of the client-receiver included therein;

determining whether to encrypt the requested service, and responsive to determining to encrypt the requested service further including the steps of;

determining from at least the device-type information of the client-receiver an encryption scheme for transmitting the requested service; and

implementing the encryption scheme to encrypt the requested service, wherein the provided requested service is encrypted in accordance with the determined encryption scheme.

17. The method of claim 1, prior to the step of providing the requested service, further including the steps of:

receiving at the web-server a message from the headend, the message having an encryption-scheme indicator included therein;

determining from the encryption-scheme indicator an encryption scheme for encrypting content transmitted to the client-receiver; and

implementing the encryption scheme to encrypt the requested service, wherein the provided requested service is encrypted in accordance with the determined encryption scheme.

18. The method of claim 17, prior to the step of receiving at the web-server the message from the headend, further including the step of:

transmitting a second message from the web-server to the headend, the message having a device-type indicator included therein, wherein the headend determines the encryption scheme using at least the device-type indicator.

19. The method of claim 18, wherein the second message includes a subscriber-identifier, and the headend processes the second message, determines whether the subscriber identified by the subscriber-identifier has a valid account, and responsive to the subscriber having a valid account, the headend determines the encryption scheme.

20. A method of providing content to a client-receiver in a local area network coupled to a headend of a subscriber television system, the method implemented in a web-server in the local area network, the web-server in communication with the headend and the client-receiver, the method comprising the steps of:

receiving at the web-server a plurality of services from the headend;

receiving at the web-server a request for a specific service of the plurality of services from a client-receiver in the local area network;

determining at the web-server whether the client-receiver is entitled to receive the requested service; and

responsive to determining the client-receiver is entitled to receive the requested service, providing the requested service to the client-receiver, wherein the specific service is formatted according to a web-based protocol.

21. The method of claim 20, further including the steps of:

determining a device-type for the client-receiver;

using the device-type of the client-receiver to determine the web-based protocol for the requested service; and

reformatting the content of the requested service from a first protocol to the web-based protocol, wherein the content of the requested service is provided to the client-receiver formatted according to the second protocol.

22. The method of claim 21, further including the steps of:

decrypting the content of the requested service;

determining at the web-server an encryption scheme for the requested service; and

prior to the step of providing, encrypting the reformatted content.

23. The method of claim 22, further including the step of:

prior to the step of decrypting, determining at the web-server whether the web-server is entitled to access the requested service, wherein the content of the requested service is only decrypted when the web-server is entitled to access the requested service.

24. The method of claim 20, wherein the web-based protocol is a Real Video protocol including a Real Video 8 protocol.

25. The method of claim 20, wherein the web-based protocol is a Windows Media Video protocol including a Windows Media Video 8 protocol and a Windows Media Video 9 protocol.

26. The method of claim 20, wherein the web-based protocol is a QuickTime protocol.

27. The method of claim 20, wherein the web-based protocol is at least one of the following protocols:

of H.323, MPEG-4, H.264, MPEG-2, Macromedia Flash, and Macromedia Shockwave.

28. The method of claim 20, prior to the step of providing the requested service, further including the steps of:

receiving at the web-server a message from the client-receiver, the message having device-type information of the client-receiver included therein;

determining from at least the device-type information of the client-receiver an encryption scheme for transmitting the requested service, and

implementing the encryption scheme to encrypt the requested service, wherein the provided requested service is encrypted in accordance with the determined encryption scheme.

29. The method of claim 20, prior to the step of providing the requested service, further including the steps of:

receiving at the web-server a message from the client-receiver, the message having device-type information of the client-receiver included therein;

determining whether to encrypt the requested service, and responsive to determining to encrypt the requested service further including the steps of;

determining from at least the device-type information of the client-receiver an encryption scheme for transmitting the requested service; and

implementing the encryption scheme to encrypt the requested service, wherein the provided requested service is encrypted in accordance with the determined encryption scheme.

30. The method of claim 20, prior to the step of providing the requested service, further including the steps of:

receiving at the web-server a message from the headend, the message having an encryption-scheme indicator included therein;

determining from the encryption-scheme indicator an encryption scheme for encrypting content transmitted to the client-receiver; and

implementing the encryption scheme to encrypt the requested service, wherein the provided requested service is encrypted in accordance with the determined encryption scheme.

31. The method of claim 30, prior to the step of receiving at the web-server the message from the headend, further including the step of:

transmitting a second message from the web-server to the headend, the message having a device-type indicator included therein, wherein the headend determines the encryption scheme using at least the device-type indicator.

32. The method of claim 31, wherein the second message includes a subscriber-identifier, and the headend processes the second message, determines whether the subscriber identified by the subscriber-identifier has a valid account, and responsive to the subscriber having a valid account, the headend determines the encryption scheme.

33. A method of providing content to a client-receiver in a local area network coupled to a headend of a subscriber television system, the method implemented in a web-server in the local area network, the web-server in communication with the headend and the client-receiver, the method comprising the steps of:

receiving at the web-server a plurality of services from the headend;

receiving at the web-server a request for a specific service of the plurality of services from a client-receiver in the local area network;

determining at the web-server whether the client-receiver is entitled to receive the specific service; and

responsive to determining the client-receiver is not entitled to receive the specific service, further including the steps of;

determining whether to entitle the client-receiver to receive the specific service; and

responsive to determining to entitle the client-receiver, granting the client-receiver an entitlement to the specific service;

determining whether to encrypt the specific service, and if so, further including the steps of;

determining an encryption scheme for encrypting the specific service;

implementing the encryption scheme to encrypt the specific service; and

responsive to the client-receiver being entitled to the specific service, providing the encrypted specific service to the client-receiver, wherein the specific service is formatted according to a web-based protocol; and

responsive to both determining not to encrypt the requested service and the client-receiver being entitled to the specific service, providing the specific service to the client-receiver, wherein the specific service is formatted according to a web-based protocol.

34. A method of accessing content at a client-receiver in a local area network coupled to a headend of a subscriber television system, the method comprising the steps of:

displaying a web page in a first window of a web-browser to a user of the client-receiver, the having subscriber television system service information included therein;

transmitting from the client-receiver a request for a user selected service instance to a web-server in the local area network;

determining at the web-server whether the web-server and the client-receiver are each entitled to access the requested service instance;

responsive to the web-server determining that both the web-server and the client-receiver are entitled to access the requested service instance, transmitting the user selected service instance from the web-server to the client-receiver; and

displaying in a second window of a web-browser the user selected service instance, wherein the user selected service instance is a service instance of a plurality of service instances received at the web-server from the headend of the subscriber television service instance.

35. The method of claim 34, wherein the user uses a link in the displayed web page to select the service instance.

36. The method of claim 34, wherein the request for the selected service instance is transmitted to the web-server using a web based protocol.

37. The method of claim 36, wherein the web based protocol is a HTTP protocol.

38. The method of claim 34, further including the steps of:

prior to the step of transmitting, decrypting at the web-server the selected service instance, wherein the selected service instance is carried to the web-server in a stream of packets from the headend of the subscriber television system, each packet of the stream of packets having encrypted content included therein, and the content is formatted according to a first protocol;

reformatting at the web-server the selected service instance, wherein the selected service instance is transmitted to the client-receiver in a format that conforms to a second protocol.

39. The method of claim 38, wherein the first protocol includes MPEG protocol.

40. The method of claim 38, wherein the second protocol is a Real Video protocol including a Real Video 8 protocol.

41. The method of claim 38, wherein the second protocol is a Windows Media Video protocol including a Windows Media Video 8 protocol and a Windows Media Video 9 protocol.

42. The method of claim 38, wherein the second protocol is a QuickTime protocol.

43. The method of claim 38, wherein the second protocol is at least one of the following protocols:

of H.323, MPEG-4, H.264, MPEG-2, Macromedia Flash, and Macromedia Shockwave.

44. The method of claim 38, prior to the step of transmitting, further including the steps of:

determining at the web-server an encryption scheme; and

after the step of reformatting, encrypting at the web-server the reformatted selected service instance according to the determined encryption scheme.

45. The method of claim 34, further including the steps of:

transmitting from the web-server to the client-receiver a second service instance, wherein the second service instance is an advertisement for a goods or a service associated with the first service instance.

46. The method of claim 45, further including the step of:

displaying at the client-receiver the second service instance; and

receiving at the web-browser an order for the goods or the service associated with the first service instance.

47. The method of claim 45, further including the steps of:

opening at the client-receiver a third window of a web-browser, wherein the second service is displayed therein.

48. The method of claim 34, prior to the step of transmitting the selected service, further including the steps of:

receiving at the web-server a message from the client-receiver, the message having device-type information of the client-receiver included therein;

determining from at least the device-type information of the client-receiver an encryption scheme for transmitting the selected service, and

implementing the encryption scheme to encrypt the selected service, wherein the selected service is encrypted in accordance with the determined encryption scheme.

49. The method of claim 34, prior to the step of transmitting the selected service, further including the steps of:

receiving at the web-server a message from the headend, the message having an encryption-scheme indicator included therein;

determining from the encryption-scheme indicator an encryption scheme for encrypting content transmitted to the client-receiver; and

implementing the encryption scheme to encrypt the selected service, wherein the selected service is encrypted in accordance with the determined encryption scheme.

50. The method of claim 49, prior to the step of receiving at the web-server the message from the headend, further including the step of:

transmitting a second message from the web-server to the headend, the message having a device-type indicator included therein, wherein the headend determines the encryption scheme using at least the device-type indicator.

51. The method of claim 50, wherein the second message includes a subscriber-identifier, and the headend processes the second message, determines whether the subscriber identified by the subscriber-identifier has a valid account, and responsive to the subscriber having a valid account, the headend determines the encryption scheme.

52. A web-server in a subscriber television system, the web-server in communication with a headend of the subscriber television system through a first communication link and located at a subscriber location, the web-server comprising:

a transceiver in communication with a client-receiver through a second communication link, wherein the transceiver receives a plurality of messages from a client-receiver, the plurality of messages including at least one message for a specific instance of service, wherein the specific instance of service is one instance of service of multiple instances of service provided by the headend;

a processor in communication with the headend and the transceiver, the processor adapted to process messages received at the transceiver from the client-receiver; and

an authorization module in communication with the processor, the authorization module adapted to determine whether the client-receiver is entitled to access the specific instance of service, wherein the specific instance of service is only provided to the client-receiver via the transceiver responsive to the authorization module determining the client-receiver is entitled.

53. The web-server of claim 52, wherein the authorization module is further adapted to grant entitlements to the client-receiver.

54. The web-server of claim 53, wherein the authorization module is further adapted to remove granted entitlements to the client-receiver.

55. The web-server of claim 52, wherein the authorization module is further adapted to receive instructions from the headend and responsive thereto grant entitlements to the client-receiver.

56. The web-server of claim 55, wherein the authorization module is further adapted to receive instructions from the headend and responsive thereto remove granted entitlements to the client-receiver.

57. The web-server of claim 52, wherein the authorization module is further adapted to grant and deny entitlements to the client-receiver using device-type information of the client-receiver.

58. The web-server of claim 52, further including:

a reformatter adapted to convert the instance of service from a first format to a second format, wherein the instance of service is provided to the client-receiver in the second format.

59. The web-server of claim 58, wherein the second format is a web-based protocol format.

60. The web-server of claim 59, wherein the web-based protocol is a Real Video protocol including a Real Video 8 protocol.

61. The web-server of claim 59, wherein the web-based protocol is a Windows Media Video protocol including a Windows Media Video 8 protocol and a Windows Media Video 9 protocol.

62. The web-server of claim 59, wherein the web-based protocol is a QuickTime protocol.

63. The web-server of claim 59, wherein the web-based protocol is at least one of the following protocols:

of H.323, MPEG-4, H.264, MPEG-2, Macromedia Flash, and Macromedia Shockwave.

64. The web-server of claim 52, wherein the processor is further adapted to receive a first message from the client-receiver, wherein the first message includes device-type information of the client-receiver, the processor further adapted to determine from at least the device-type information of the client-receiver an encryption scheme for transmitting the specific service, and implement the encryption scheme to encrypt the specific service, wherein the specific service is encrypted in accordance with the determined encryption scheme.

65. The web-server of claim 52, wherein the processor is further adapted to receive a first message from the headend, the first message having an encryption-scheme indicator included therein, to determine from the encryption-scheme indicator an encryption scheme for encrypting content transmitted to the client-receiver, and implement the encryption scheme to encrypt the specific service, wherein the specific service is encrypted in accordance with the determined encryption scheme.

66. The web-server of claim 65, wherein prior to receiving the first message, the processor transmits a second message to the headend, the second message having a device-type indicator included therein, wherein the headend determines the encryption scheme using at least the device-type indicator.

67. The web-server of claim 66, wherein the second message includes a subscriber-identifier, and the headend processes the second message, determines whether the subscriber identified by the subscriber-identifier has a valid account, and responsive to the subscriber having a valid account, the headend determines the encryption scheme.

68. A web-server in a subscriber television system, the web-server in communication with a headend of the subscriber television system through a first communication link and located at a subscriber location, the web-server comprising:

a transceiver in communication with a client-receiver through a second communication link, wherein the transceiver receives a plurality of messages from a client-receiver formatted according to a web based protocol, the plurality of messages including at least one message for a specific instance of service, wherein the specific instance of service is one instance of service of multiple instances of service provided by the headend;

a processor in communication with the headend and the transceiver, the processor adapted to process messages received at the transceiver from the client-receiver and determine therefrom a scheme for providing the client-receiver with the specific instance of service via the transceiver; and

an authorization module in communication with the processor, the authorization module adapted to grant the client-receiver entitlement to access the specific instance of service, wherein the specific instance of service is only provided to the client-receiver responsive to the client-receiver having the entitlement to access the specific instance of service.

69. The web-server of claim 68, further including:

a decryptor in communication the transceiver, the decryptor adapted to decrypt the specific instance of service, wherein the specific instance of service is carried to the web-server in a stream of packets, and each packet carries a payload that the decryptor decrypts, and the payload is formatted according to a first protocol; and

a reformatter in communication with the decryptor and the transceiver, the reformatter adapted to reformat the payload of the packets according to a second protocol and provide the reformatted payload to the transceiver.

70. The web-server of claim 69, wherein the first protocol includes MPEG protocol.

71. The web-server of claim 69, wherein the second protocol is a Real Video protocol including a Real Video 8 protocol.

72. The web-server of claim 69, wherein the second protocol is a Windows Media Video protocol including a Windows Media Video 8 protocol and a Windows Media Video 9 protocol.

73. The web-server of claim 69, wherein the second protocol is a QuickTime protocol.

74. The web-server of claim 69, wherein the second protocol is at least one of the following protocols:

of H.323, MPEG-4, H.264, MPEG-2, Macromedia Flash, and Macromedia Shockwave.

75. The web-server of claim 69, wherein the processor determines that the scheme for providing the client-receiver with the specific instance of service includes determining an encryption scheme, and further including:

an encryptor in communication with the processor, the reformatter, and the transceiver, the encryptor adapted to encrypt the reformatted payload according to the encryption scheme determined by the processor.

76. The web-server of claim 75, wherein the processor is further adapted to determine a device-type of the client-receiver and use the device-type in determining the encryption scheme.

77. The web-server of claim 75, wherein the processor determines that the scheme for providing the client-receiver with the specific instance of service is to provide the client-receiver with the specific instance of service without encryption.

78. The web-server of claim 77, wherein when the fidelity of the second protocol is generally less than the first protocol the processor determines to provide the client-receiver with the specific instance of service without encryption.

79. The web-server of claim 68, wherein the processor is further adapted to receive a first message from the client-receiver, wherein the first message includes device-type information of the client-receiver, the processor further adapted to determine from at least the device-type information of the client-receiver an encryption scheme for transmitting the specific service, and implement the encryption scheme to encrypt the specific service, wherein the specific service is encrypted in accordance with the determined encryption scheme.

80. The web-server of claim 68, wherein the processor is further adapted to receive a first message from the headend, the first message having an encryption-scheme indicator included therein, to determine from the encryption-scheme indicator an encryption scheme for encrypting content transmitted to the client-receiver, and implement the encryption scheme to encrypt the specific service, wherein the specific service is encrypted in accordance with the determined encryption scheme.

81. The web-server of claim 80, wherein prior to receiving the first message, the processor transmits a second message to the headend, the second message having a device-type indicator included therein, wherein the headend determines the encryption scheme using at least the device-type indicator.

82. The web-server of claim 81, wherein the second message includes a subscriber-identifier, and the headend processes the second message, determines whether the subscriber identified by the subscriber-identifier has a valid account, and responsive to the subscriber having a valid account, the headend determines the encryption scheme.

83. A web-server receiving through a first communication link multiple instances of service from a headend of a subscriber television system, the web-server comprising:

a transceiver in communication with a client-receiver through a second communication link, wherein the transceiver receives a plurality of messages from a client-receiver formatted according to a web based protocol, the plurality of messages including at least one message for a specific instance of service, wherein the specific instance of service is one of the multiple instances of services provided by the headend;

a processor in communication the transceiver, the processor adapted to process messages received at the transceiver from the client-receiver and determine therefrom a scheme for providing the client-receiver with the specific instance of service via the transceiver; and

an authorization module in communication with the processor, the authorization module adapted to grant the client-receiver entitlement to access the specific instance of service, wherein the specific instance of service is only provided to the client-receiver responsive to the client-receiver having the entitlement to access the specific instance of service, wherein the authorization module is further adapted to implement instructions received from the headend for granting and denying entitlements for the client-receiver to instances of service.

84. The web-server of claim 83, further including:

a decryptor in communication with the transceiver, the decryptor adapted to decrypt the specific instance of service, wherein the specific instance of service is carried to the web-server in a stream of packets, and each packet carries a payload that the decryptor decrypts, and the payload is formatted according to a first protocol; and

a reformatter in communication with the decryptor and the transceiver, the reformatter adapted to reformat the payload of the packets according to a second protocol and provide the reformatted payload to the transceiver.

85. The web-server of claim 83, wherein the authorization module is further adapted to implement instructions from the headend for denying and granting entitlements for the web-server to instances of service.