Satellite Signal Re-securing via Two-Way Channel Encryption

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Satellite signal distribution systems face vulnerabilities to piracy due to the lack of a native two-way communication channel, leading to revenue losses as subscribers share receivers and security codes, compromising signal security.

Innovation Solution

Implementing a method where a set top box encrypts communications with a channel stacking switch using a public key, with the switch maintaining a private key and generating a new public key based on ECM data and identifiers, enabling secure key exchange and re-securing of communication channels upon security breaches.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If a satellite signal distribution system uses a one-way communication channel from head end to receivers, then the system is simpler to implement, but the signal becomes vulnerable to piracy and security breaches

Engineering Contradiction:

Improvecommunication channel structureVSAvoidsignal security

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The patent introduces an intermediary two-way communication channel between the head end and receivers. This intermediary channel carries ECM (Electronic Conditional Access Message) and ECMACK (ECM Authentication and Key Management) data, enabling the head end to send security commands and receive acknowledgments from receivers, thereby securing the signal distribution system against piracy while maintaining operational simplicity

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary security setup by establishing a two-way communication channel before signal distribution begins. The head end pre-configures security parameters, sends initial ECM data, and sets up the framework for ongoing security management, so that when signal distribution occurs, the security infrastructure is already in place to prevent piracy

Inventive Principle:

Principle #10Preliminary action

2Ease of operation

If subscribers are allowed to share receivers under one account, then the ease of operation increases, but security breaches occur as receivers are passed to friends and neighbors

Engineering Contradiction:

Improvereceiver sharing capabilityVSAvoidpiracy and unauthorized access

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent implements a feedback mechanism where the head end continuously monitors receiver usage through the two-way communication channel. When a receiver is activated or moved, the system receives feedback signals from the receiver, allowing the head end to track and control authorized devices. This feedback loop enables legitimate sharing while detecting and preventing unauthorized piracy activities

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The system dynamically adjusts security permissions based on real-time receiver identification and location data. The head end can activate or deactivate specific receivers, update ECM data for particular devices, and modify access rights dynamically. This dynamic control allows flexible subscriber sharing arrangements while maintaining the ability to respond to and prevent piracy incidents as they occur

Inventive Principle:

Principle #15Dynamics

3Adaptability or versatility

If security codes are distributed through communication media like the Internet, then the adaptability of the system increases, but the signal security is compromised as codes reach non-subscribing owners

Engineering Contradiction:

Improvecode distribution capabilityVSAvoidsignal security

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent extracts the security code distribution function from external communication media like the Internet and relocates it entirely within the controlled satellite communication channel. The head end sends ECM and ECMACK data exclusively through the authenticated two-way channel between the head end and authorized receivers. This extraction eliminates the security vulnerability of external code distribution while maintaining the adaptability to deliver security updates and new codes to authorized subscribers through the secure channel

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS10321201B2Methods and systems for re-securing a compromised channel in a satellite signal distribution environment

Publication Date: 2019.06.11 BCE

AI summary

A method implemented by a set top box that encrypts communications for a channel stacking switch (CS) using a public key of the CSS, the method comprising: obtaining a message from a head end; extracting electronic counter measure (ECM) data from the message; sending the ECM data to the CSS; receiving, in response to the sending, a new public key of the CSS; encrypting communications for the CSS using the new public key of the CSS. Also, a method for implementation by a CSS, comprising: maintaining a private key and a public key; obtaining ECM data sent by a set top box in communication with the CSS; obtaining an identifier of the CSS; formulating a new public key based on the private key, the identifier and the ECM; rendering the new public key available to the set top box.