Mutual authentication apparatus and method in downloadable conditional access system

摘要

A mutual authentication method in a Downloadable Conditional Access System (DCAS) is provided. The mutual authentication method may receive authentication-related information about authentication between an authentication unit and a security module (SM) from a Trusted Authority (TA), generate an authentication session key using the authentication-related information, transmit the authentication session key by the authentication unit to the SM through a Cable Modem Termination System (CMTS), and control a Conditional Access System (CAS) software to be downloaded to the SM from the authentication unit, when the authentication is completed by the authentication session key.

主权项

1. A mutual authentication apparatus in a Downloadable Conditional Access System (DCAS), the mutual authentication apparatus comprising:
a computer system comprising a processor and memory; an authentication unit operating on the computer system and adapted to transmit an authentication session key to a security module (SM) through a Cable Modem Termination System (CMTS); a key management unit operating on the computer system and adapted to generate and manage the authentication session key; and a download unit operating on the computer system and adapted to at least one of control the SM to download and update a Conditional Access System (CAS) software, wherein security and authentication of information transmitting or receiving among a Trusted Authority (TA), the authentication unit, and the SM is configured to be performed according to a DCAS protocol, wherein the DCAS protocol is configured to perform mutual authentication between the authentication unit and the SM, wherein the performed mutual authentication is configure to be done prior to DCAS protocol enabling the CAS software to be transmitted to the SM, and wherein the performed mutual authentication by the DCAS protocol is configured to be performed without use of a Data Over Cable Service Interface Specification (DOCSIS) layer, an Internet Protocol (IP) layer, a Transmission Control Protocol/User Datagram Protocol (TCP/UDP) layer, and wherein the SM downloads the CAS software from the authentication unit and obtain an authority to a broadcasting signal.