IDC Superflex Flexkey Encryptor DVB CAS PID System

FlexKey Encryptor DVB CAS

The IDC FlexKey Encryptor is a low cost, flexible key DVB CAS system, which encrypts selected PID data within a DVB Transport Stream destined for the Superflex series of satellite receivers: SR2000plus, SR2000pro, Sxx2100F series, SRA2100f and SFX2100f.

SIMPLE INTEGRATION

Installed at the head end, it's placed between the DVB IP Encapsulator (IPE) and the DVB Modulator.  It receives an ASI transport stream from the IPE, encrypts DVB packets for selected PIDs and forwards the resulting transport stream out another ASI interface to the modulator. The user monitors and controls the FlexKey Encryptor with a Web GUI or Terminal Interface. Front panel LED indicators are also provided.

KEY GENERATION

using a highly sophisticated random number generation algorithm, and passed onto an internal secure device for encryption. Keys are encrypted using a security device which has an internal “secret”, programmed at the factory. It must also be programmed into the security device of each receiver that wishes to decrypt the data on the network. The “secret” itself is also encrypted for highly secure operation. 

KEY MANAGEMENT

Supports key pairs (i.e. even and odd keys) using a mechanism similar to that used to manage keys in DVB CAS. Encrypted keys are communicated to the receivers using Entitlement Control Messages (ECMs).  Two parameters are associated with key management.  The ECM Transmission Period indicates how often ECMs are sent out and the Key Update Period determines how often the keys in the ECM are changed. Keys can be updated automatically or manually.

DATA ENCRYPTION

selected DVB packets are encrypted using the AES Rijndael algorithm, using the associated even or odd 128-bit key. It sets the scrambled bits in the header of each DVB packet to indicate which key (even or odd) was used to encrypt that packet, as is done with DVB CAS.  The same key, even or odd, is used to encrypt all selected PIDs.