Mutual authentication apparatus and method in downloadable conditional access system

A mutual authentication method in a Downloadable Conditional Access System (DCAS), the mutual authentication method comprising:

• receiving authentication-related information about authentication between an authentication unit and a security module (SM) from a Trusted Authority (TA);
• generating an authentication session key using the authentication-related information;
• transmitting the authentication session key by the authentication unit to the SM through a Cable Modem Termination System (CMTS);
• and
• controlling a CAS software to be downloaded to the SM from the authentication unit, when the authentication is completed by the authentication session key, and generating the authentication session key from a DCAS protocol, and operating the DCAS protocol independently of a Data Over Cable Service Interface Specification (DOCSIS) layer, an Internet Protocol (IP) layer, a Transmission Control Protocol/User Datagram Protocol (TCP/UDP) layer, and wherein the SM obtains an authority to a broadcasting signal.

A mutual authentication apparatus in a Downloadable Conditional Access System (DCAS), the mutual authentication apparatus comprising:

• a computer system comprising a processor and memory;
• an authentication unit operating on the computer system and adapted to transmit an authentication session key to a security module (SM) through a Cable Modem Termination System (CMTS);
• a key management unit operating on the computer system and adapted to generate and manage the authentication session key;
• and
• a download unit operating on the computer system and adapted to control the SM to download or update a Conditional Access System (CAS) software,
• wherein security and authentication of information transmitting or receiving among a Trusted Authority (TA), the authentication unit, and the SM is configured to be performed according to a DCAS protocol,
• wherein the DCAS protocol is a protocol that is mutually exclusive from a Data Over Cable Service Interface Specification (DOCSIS) layer, an Internet Protocol (IP) layer, a Transmission Control Protocol/User Datagram Protocol (TCP/UDP) layer, and wherein the SM obtains an authority to a broadcasting signal.