SHAPING THE FUTURE OF SATELLITE COMMUNICATIONS
9.13.3.4 Removing a Receiver from the Network
Starting point: The encryptor sends encrypted data to the descriptors. The odd
key is active. All have their encryption mode set to “On”.
Steps:
1. Define a new even content key;
2. The new content key is entered in all decryptors, except the one receiver to be
removed from the network;
3. The new content key is entered in the encryptor;
4. The encryptor is switched to the even key.
9.13.3.5 Sending Protected Content Keys
Starting point: An encryptor and a set of decryptors are running in a secured
facility (or in secured facilities).
Steps:
1. Define a group key;
2. Insert the group key in all units by a trusted person/system in expert mode;
3. Deploy the devices;
4. Set the key for a transmission, sending encrypted content keys rather than
content keys.
9.13.3.6 Creating Groups of Receivers
Groups of receivers, mutually exclusive, are created by inserting different group
keys in those receivers and in the related sender. This way, keys sent to a group of
receivers cannot be used by another group of receivers.
9.13.3.7 Changing Group Keys
Group keys need to be changed by a trusted person or entity. The devices are set
in expert mode and the group key is changed. The security of this operation relays
on the security level of the entity modifying the group key.
For remote group key update, use a secure connection up to the
device or at least up to the machine controlling the device.
To Next Page
Loading...
