Security Processor Illicit Use Detection via ECM Counter Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for detecting illicit use of security processors in multimedia content distribution, such as card sharing and control word sharing, become ineffective when each security processor is dedicated to a restricted number of channels, as they do not detect prolonged absence of channel changes, making it difficult to differentiate between legitimate and illicit use.
Innovation Solution
A method that detects illicit use by monitoring the prolonged absence of channel changes, using counters to track ECM message reception over time, and adjusting the time window duration to enhance detection robustness, thereby triggering alerts for potential illicit activities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security processors are dedicated to a restricted number of channels, then channel access control is improved, but detection of illicit use becomes ineffective
Solution Approach 1:
The system performs preliminary actions by establishing expected ECM reception patterns before illicit use occurs. It pre-defines time windows and counter thresholds that represent normal operation, enabling proactive detection when deviations occur rather than reacting after card sharing is established
Solution Approach 2:
The system implements feedback mechanisms through counters that continuously monitor ECM message reception and provide real-time information about system state. When counters exceed thresholds or time windows are violated, the system generates feedback signals that trigger illicit use detection and countermeasures
2Measurement precision
If traditional detection methods are used, then card sharing detection is effective, but they fail to detect prolonged absence of channel changes
Solution Approach 1:
The detection system is designed with multi-functionality to handle multiple types of illicit use scenarios. It can detect both traditional card sharing (through ECM message analysis) and control word sharing (through time window violation detection), making it adaptable to various attack methods rather than being limited to a single detection approach
3Reliability
If monitoring of ECM message reception is implemented, then illicit use detection is improved, but false positives may increase
Solution Approach 1:
The system applies partial monitoring by focusing on specific critical parameters (ECM message timing, counter thresholds) rather than analyzing all possible operation parameters. This selective monitoring approach maintains detection effectiveness while reducing the likelihood of false positives from over-monitoring
Solution Approach 2:
The system uses adjustable parameters including time window duration and counter thresholds that can be optimized to match normal operational patterns. By tuning these parameters, the system adapts to legitimate usage variations while maintaining sensitivity to illicit use, thereby reducing false positives
Data Source
Figure 1~2
Figure 3
AI summary
This method for detecting illegal use of a security processor used for descrambling various multimedia contents broadcast on a plurality of respective channels involves: - incrementing (153) a counter Kchi by a predetermined step each time that, following the verification, a message ECMi,c is received within a time window immediately following a message ECMi,p and, in a converse case, reinitializing (158) the counter Kchi to its initial value, - detecting (162) illegal use as soon as the counter Kchi reaches a predetermined threshold.