Newtec M6100 - Creating Groups of Receivers; Keys and Redundancy, Backup or Import; Backup a Configuration; BISS and Redundancy

Newtec Proprietary
Confidentiality: Unrestricted
V1.4
203/225
Features Descriptions M6100 Broadcast Satellite Modulator
12.11.7.6 Creating Groups of Receivers
Groups of receivers, mutually exclusive, are created by inserting different Injected IDs in those
receivers and in the related sender. This way, another group of receivers cannot use Encrypted
Session Words sent to a group of receivers.
12.11.8 Keys and Redundancy, Backup or Import
A solution based on BISS should combine security, but also guarantee operations. BISS Session
Words cannot be copied from one device to another or exported, except in some cases:
• Redundancy;
• Export of a configuration for backup purposes;
• Import of a configuration pre-generated.
12.11.8.1 BISS and Redundancy
The BISS implementation allows copying a session word during a redundancy switch.
To ensure the security of the key, a Setup Identifier is used. A Setup Identifier is the equivalent of
the Injected ID: it is used to encrypt session words when copied from one device to another, using
the Newtec AZ202 switch.
The setup ID is typically the same for all devices in a redundancy bank. It is recommended that this
setup ID is unique for each redundancy setup.
Setup IDs all have the same default value, so that redundancy always works for devices coming from
factory.
In that case, the session word is not secured, as it can be copied to any other device during a
switch. It is thus recommended to define the setup ID when deploying a redundant setup using
BISS.
12.11.8.2 Backup a Configuration
It is possible to export and import device configurations. The Session Word is exported in an
encrypted manner, as well as the Injected ID, so that they can be recovered after an import on the
SAME device. If this configuration is imported on another device, the Injected ID will be ignored.
If this configuration is imported on a device with the same Setup ID, the Session Word will however
be loaded.
The default value of the setupID is the same for all devices. By default, exporting and
importing a configuration on another device will allow the copy of the BISS SW. To
avoid that, define the setup ID to a secret value.
An alternative is to set the setup ID of the device to zero. This will allow backup of
configuration, but will prevent the import of that configuration on any other device.
The keys are then fully protected.