Abstract: A system, apparatus, and method are directed towards managing entitlement/right revocation and delivery to be performed within a non-addressable media network. Such networks may include for example a client device behind a network address translation (NAT) device, employs non-addressable satellite components, or so forth. A server notifies clients that entitlements, revocations, or the like are available by sending a request for communications with the client. The client initiates a connection to receive the entitlements, or the like, and then disconnects from the server. If the client fails to initiate a connection, the server may continue to send a request for a connection, or even change encryption keys to the content to prevent access by the client. In one embodiment, failure to receive an acknowledgement response from the server of a connection with the client, or from the client, may result in invocation of a revocation failure action.

Abstract: A system, apparatus, and method are directed towards managing entitlement/right revocation and delivery to be performed within a non-addressable media network. Such networks may include for example a client device behind a network address translation (NAT) device, employs non-addressable satellite components, or so forth. A server notifies clients that entitlements, revocations, or the like are available by sending a request for communications with the client. The client initiates a connection to receive the entitlements, or the like, and then disconnects from the server. If the client fails to initiate a connection, the server may continue to send a request for a connection, or even change encryption keys to the content to prevent access by the client. In one embodiment, failure to receive an acknowledgement response from the server of a connection with the client, or from the client, may result in invocation of a revocation failure action.

Abstract: A network device and method are directed towards providing one time content encryption for Video on Demand (VOD) broadcast services and Networked Personal Video Recorders (NPVRs) using unique encryption keys. As content is received by the network device, it is determined whether the content is for broadcast distribution to a consumer and to be ingested into an NPVR/VOD server for possible unicast distribution. If the content is for both distributions, it is encrypted using at least one control word (CW) key. The encrypted content is then copied into at least two streams, with the CW being encrypted with at least two different keys, one for broadcast distribution, and one for NPVR Programs. One stream may then be ingested by the NPVR/VOD server, while the other stream may be broadcast to a consumer. The encryption keys may be provided through EMMs to a consumer based on a purchase.