Protected client inventory redeployment
AssigneeARRIS Enterprises LLC
InventorPhilip B. Hawthorne
Life of this patent
Estimating the term…
Abstract
The systems and method disclosed herein address introduce identifiers within the individual entitlement management messages (EMMs) addressed to that client that uniquely identify the combination of system and subscriber account to which the client is deployed, and use of them to issue automatic ‘factory reset’ behavior when the client is re-authorized for the new subscriber. In one embodiment, the EMM messages used to trigger the reset behavior are cryptographically signed specifically for the individual client to ensure that such a message cannot be maliciously sent by an untrusted third party. The facility to deliver such a message is already available within the conditional access system (CAS).
Claims19
A method of reconfiguring a client device, the client device receiving a plurality of entitlement messages via a messaging protocol, at least a portion of the plurality of entitlement messages comprising conditional access information including one or more content protection keys for decrypting content provided to and stored by the client device, the method implemented in the client device and comprising:
- receiving and storing, in secure memory of the client device, credentials provisioned to the client device, the credentials comprising a subscriber identifier and a first network identifier unique to a first Content Delivery Network (CDN);
- receiving an entitlement message, the received entitlement message having a second subscriber identifier and a second network identifier unique to a second Content Delivery Network (CDN);
- comparing the second subscriber identifier with the stored first subscriber identifier and the second network identifier with the stored first network identifier;
- and
- triggering a client device reset procedure according to the comparison.
An apparatus for reconfiguring a client device, the client device receiving a plurality of entitlement messages via a messaging protocol, at least a portion of the plurality of entitlement messages comprising conditional access information including one or more content protection keys for decrypting content provided to and stored by the client device, the apparatus comprising a processor and a memory communicatively coupled to the processor, the memory storing processor instructions for:
- receiving and storing, in secure memory of the client device, credentials provisioned to the client device, the credentials comprising a subscriber identifier and a first network identifier unique to a first Content Delivery Network (CDN);
- receiving an entitlement message, in secure memory of the client device, the received entitlement message having a second subscriber identifier and a second network identifier unique to a second Content Delivery Network (CDN);
- the client device comparing the second subscriber identifier with the stored first subscriber identifier and the second network identifier with the stored first network identifier;
- and
- triggering a client device reset procedure according to the comparison.
Dependencies are inferred from the claim text.