Protected client inventory redeployment
AssigneeARRIS Enterprises LLC
InventorPhilip B. Hawthorne
Life of this patent
Estimating the term…
Abstract
The systems and method disclosed herein address introduce identifiers within the individual entitlement management messages (EMMs) addressed to that client that uniquely identify the combination of system and subscriber account to which the client is deployed, and use of them to issue automatic ‘factory reset’ behavior when the client is re-authorized for the new subscriber. In one embodiment, the EMM messages used to trigger the reset behavior are cryptographically signed specifically for the individual client to ensure that such a message cannot be maliciously sent by an untrusted third party. The facility to deliver such a message is already available within the conditional access system (CAS).
Claims20
A method of reconfiguring a client device, the client device receiving a plurality of entitlement messages via a messaging protocol, at least a portion of the plurality of entitlement messages comprising conditional access information including one or more content protection keys for decrypting content provided to and stored by the client device, the method comprising:
- receiving and storing, in secure memory of the client device, credentials provisioned to the client device, the credentials comprising:
- a subscriber identifier;
- a first network identifier;
- and
- receiving an entitlement message, the received entitlement message having a second subscriber identifier and a second network identifier;
- comparing the second subscriber identifier with the stored first subscriber identifier and the second network identifier with the stored first network identifier;
- and
- triggering a client device reset procedure according to the comparison.
An apparatus for reconfiguring a client device, the client device receiving a plurality of entitlement messages via a messaging protocol, at least a portion of the plurality of entitlement messages comprising conditional access information including one or more content protection keys for decrypting content provided to and stored by the client device, the apparatus comprising:
- a processor;
- a memory, communicatively coupled to the processor, the memory storing processor instructions comprising processor instructions for:
- receiving and storing, in secure memory of the client device, credentials provisioned to the client device, the credentials comprising:
- a subscriber identifier;
- a first network identifier;
- and
- receiving an entitlement message, the received entitlement message having a second subscriber identifier and a second network identifier;
- comparing the second subscriber identifier with the stored first subscriber identifier and the second network identifier with the stored first network identifier;
- and
- triggering a client device reset procedure according to the comparison.
A apparatus for reconfiguring a client device, the client device receiving a plurality of entitlement messages via a messaging protocol, at least a portion of the plurality of entitlement messages comprising conditional access information including one or more content protection keys for decrypting content provided to and stored by the client device, comprising:
- means for receiving and storing, in secure memory of the client device, credentials provisioned to the client device, the credentials comprising:
- a subscriber identifier;
- a first network identifier;
- and
- means for receiving an entitlement message, the received entitlement message having a second subscriber identifier and a second network identifier;
- means for comparing the second subscriber identifier with the stored first subscriber identifier and the second network identifier with the stored first network identifier;
- and
- means for triggering a client device reset procedure according to the comparison
Dependencies are inferred from the claim text.