System and method for secure conditional access download and reconfiguration

A system for securely downloading at least one of conditional access software (CAS), Digital Rights Management software (DRMS), Trusted Domain Software (TDS), and Gaming Security Software (GSS), the system comprising:

• a headend having a sender security server;
• and
• a receiver coupled to the headend, and having a receiver security device, wherein
• the sender security server presents a specialized entitlement management message (EMM) to initiate the download to the receiver security device using a supervisory logon key (SLK) split to logon with a second split contained inside the receiver security device;
• the receiver security device presents a receiver digitally signed random challenge to the sender security server to establish authentication of the receiver security device to the sender security server;
• and
• the sender security server signs and returns the receiver random challenge to the receiver security device with a sender random challenge to establish authentication of the sender security server to the receiver security device.

A receiver security device for securely downloading at least one of conditional access software (CAS), Digital Rights Management software (DRMS), Trusted Domain Software (TDS), and Gaming Security Software (GSS), the device comprising:

• a microprocessor;
• a transport chip coupled to the microprocessor;
• and
• a memory coupled to the microprocessor, wherein the memory includes programming to perform the steps of:
• receiving a specialized entitlement management message (EMM) to initiate the download at the receiver security device using a supervisory logon key (SLK) split to logon with a second split contained inside the receiver security device from a sender security server via the transport chip;
• presenting a receiver digitally signed random challenge from the receiver security device to the sender security server to establish authentication of the receiver security device to the sender security server;
• and
• receiving the signed receiver random challenge and a sender random challenge from the sender security server to establish authentication of the sender security server to the receiver security device.