System and method for providing conditional access in a satellite television system

Abstract

A network device may pair with a particular satellite dish by storing a security key uniquely associated with the particular satellite dish. The network device may then receive encrypted data from the particular satellite dish, and decrypt the received encrypted data utilizing the security key. One or more circuits of the network device may be operable to prevent the network device from decrypting data from any satellite dish other than the particular satellite dish. The network device may be operable such that the security key is the only key that the network device can utilize for decrypting signals received via a particular interface and/or from a particular address. One or more circuits collocated with a satellite dish may be operable to encrypt data utilizing a security key stored in the one or more circuits. The security key may be unique to the one or more circuits and/or satellite dish.

1 . A system comprising:
 one or more circuits for use in a network device, said one or more circuits being operable to:
 pair with a particular satellite dish by storing a security key uniquely associated with said particular satellite dish; 
 receive encrypted data from said particular satellite dish; 
 decrypt said received encrypted data utilizing said security key. 
   
     
     
         2 . The system of  claim 1 , wherein said one or more circuits are operable to prevent said network device from decrypting data from any satellite dish other than said particular satellite dish. 
     
     
         3 . The system of  claim 1 , wherein said one or more circuits are operable such that said security key is the only key that said network device can utilize for decrypting signals received via a particular interface and/or from a particular address. 
     
     
         4 . The system of  claim 1 , wherein said security key is written to said one or more circuits while said one or more circuits are configured into a service mode. 
     
     
         5 . The system of  claim 1 , wherein said security key is received via a link that is out-of-band with a link between said network device and said particular satellite dish. 
     
     
         6 . The system of  claim 1 , wherein:
 said one or more circuits comprise one-time-programmable (OTP) memory; and   said security key is stored in said OTP memory.   
     
     
         7 . The system of  claim 1 , wherein:
 said one or more circuits comprise an electrically erasable programmable read only memory (EEPROM); and   said security key is stored in said EEPROM.   
     
     
         8 . The system of  claim 1 , wherein:
 said one or more circuits comprise flash memory; and   said security key is stored in said flash memory.   
     
     
         9 . A method comprising:
 performing by one or more circuits in a network device:
 pairing with a particular satellite dish by storing a security key uniquely 
   associated with said particular satellite dish;
 receiving encrypted data from said particular satellite dish; 
 decrypting said received encrypted data utilizing said security key. 
   
     
     
         10 . The method of  claim 9 , comprising preventing said network device from decrypting data from any satellite dish other than said particular satellite dish. 
     
     
         11 . The method of  claim 9 , wherein said security key is the only key that the network device can utilize for decrypting signals received via a particular interface and/or from a particular address. 
     
     
         12 . The method of  claim 9 , comprising writing said security key to said one or more circuits while said one or more circuits are configured into a service mode. 
     
     
         13 . The method of  claim 9 , comprising receiving said security key via a link that is out-of-band with a link between said network device and said particular satellite dish. 
     
     
         14 . The method of  claim 9 , wherein:
 said one or more circuits comprise one-time-programmable (OTP) memory; and   said storing comprises storing the security key in said OTP memory.   
     
     
         15 . The method of  claim 9 , wherein:
 said one or more circuits comprise an electrically erasable programmable read only memory (EEPROM); and   said storing comprises storing the security key in said EEPROM.   
     
     
         16 . The method of  claim 9 , wherein:
 said one or more circuits comprise flash memory; and   said security key is stored in said flash memory.   
     
     
         17 . A system comprising:
 one or more circuits collocated with a satellite dish, said one or more circuits being operable to:
 encrypt data utilizing a security key stored in said one or more circuits, wherein said security key is unique to said satellite dish; and 
 transmit said encrypted data. 
   
     
     
         18 . The system of  claim 17 , wherein said one or more circuits are operable to transmit said encrypted data over an Internet Protocol (IP) network. 
     
     
         19 . The system of  claim 17 , wherein said security key can be read from said one or more circuits only while said one or more circuits are configured into a service mode. 
     
     
         20 . The system of  claim 17 , wherein said one or more circuits are operable to transmit said security key to a network device while said one or more circuits are configured into a service mode. 
     
     
         21 . The system of  claim 17 , wherein:
 said one or more circuits comprise one-time-programmable (OTP) memory; and   said security key is stored in said OTP memory.   
     
     
         22 . The system of  claim 17 , wherein:
 said one or more circuits comprise an electrically erasable programmable read only memory (EEPROM); and   said security key is stored in said EEPROM.   
     
     
         23 . The system of  claim 17 , wherein:
 said one or more circuits comprise flash memory; and   said security key is stored in said flash memory.