Abstract: A downloadable conditional access system (DCAS), a secure micro (SM), and a transport processor (TP), and a security authentication method using the same are provided. The DCAS provides a safe security environment through a security protocol which enables mutual authentication and secure channel establishment between the SM and the TP.

Abstract: An apparatus for combining a broadcasting channel may include a channel detector to detect a vacant Radio Frequency (RF) broadcasting channel used by a photoelectric converter that converts a first broadcast program as an optical signal to a first RF signal, a broadcast receiving interface to receive at least one second broadcast program, a broadcast modulator to generate a second RF signal by modulating the second broadcast program using the vacant RF broadcasting channel, and a channel combiner to combine a broadcasting channel used for the first RF signal and the vacant RF broadcasting channel.

Abstract: A method of operating a headend system for a downloadable conditional access service, the method including: receiving, by an Authentication Proxy (AP) server, basic authentication information from a Downloadable Conditional Access System (DCAS) host, the basic authentication information being required to authenticate the DCAS host; transmitting, by the AP server, the basic authentication information to an external trusted authority device which authenticates the DCAS host; generating, by the AP server, a session key for encrypting/decrypting a secure micro client using a session key sharing factor; obtaining, by the AP server, download-related information of the secure micro client from a DCAS Provisioning Server (DPS); and commanding, by the AP server, an Integrated Personalization System (IPS) server to download the secure micro client to the DCAS host based on the download-related information, the secure micro client being encrypted by the session key.

Abstract: An apparatus and method for fast load balancing bandwidth allocation based on a binary search may be provided, wherein the apparatus may include a bandwidth allocation request receiving unit to receive a bandwidth allocation request signal from at least one modem, and a bandwidth allocation processing unit to allocate a bandwidth to an upstream channel of the at least one modem, using a load balancing algorithm, in response to the received bandwidth allocation request signal.

Abstract: Provided is an automatic gain controlling device that may prevent deterioration in performance of an orthogonal frequency division multiplexing (OFDM) receiver, on a cable network that performs communication by an orthogonal frequency division multiplexing (OFDM) scheme using high-order quadrature amplitude modulation (QAM), the automatic gain controlling device including a power computing unit to compute a power of a signal received by the OFDM receiver, and a gain controller to control a gain of the received signal based on the computed power of the received signal.

Abstract: Provided is apparatus and method for transforming cable channel. The apparatus includes a data mixing unit for receiving and mixing a band data and a first broadband data, to thereby generate a second broadband data of a broadband cable channel, and a channel adapting unit for dividing a band data from the second broadband data received through the broadband cable channel, bypassing the second broadband data to a first subscriber apparatus and transmitting the band data to a second subscriber apparatus.

Abstract: There is provided a remote entitlement processing module integration processing device. The remote entitlement processing module integration processing device includes: a remote entitlement processing module generating and managing remote smart cards (RSCs) having the number corresponding to the number of host terminals managed by the remote entitlement processing module integration processing device; and a descrambler transferring channel selection information in response to a selection of a pay channel by a user to the remote entitlement processing module and descrambling a scrambled channel signal using a control word (CW) received as a response to the channel selection information, thereby making it possible to minimize dependency between a subscriber device and a conditional access system.

Abstract: A security control method in a cable network dynamic multicast session, and more particularly, a method of controlling forward secrecy and backward secrecy in a Data Over Cable Service Interface Specifications (DOCSIS) 3.0 network dynamic multicast session is provided. A security control method in a cable network dynamic multicast session, includes: maintaining a multicast group that is allocated with a first Downstream Service Identifier (DSID) and a first Security Association Identifier (SAID) and that is joined by a first cable modem and a second cable modem; receiving a LeaveMulticastSession message from the second cable modem; exchanging, corresponding to the LeaveMulticastSession message, a Dynamic Bonding Change (DBC) message for changing a multicast parameter with the second cable modem; and updating a first Traffic Encryption Key (TEK) corresponding to the first DSID with a second TEK.

Abstract: A method for installing different security clients for channels in a terminal in a conditional access system includes: searching one or more channels searchable in the terminal; requesting, for respective searched channels, security clients necessary for receiving pay programs to be transmitted through the searched channels, to a broadcasting station which takes charge of the searched channels; and downloading and installing, for respective searched channels, the requested security clients from the broadcasting station.

Abstract: Provided are a method of configuring a hierarchical network of user groups and resource groups, and a key distribution center. The method includes the steps of: analyzing hierarchical connection relationships between respective user groups and respective resource groups, comparing redundancy rates of the respective hierarchical connection relationships, and determining a connection mode having a larger redundancy rate; separating the respective user groups and resource groups and hierarchically connecting the user groups with the resource groups, according to the determined connection mode; comparing hierarchical connections between the respective separated user groups and resource groups, and removing an overlapping hierarchical connection; and recombining the separate hierarchical connections except for the overlapping hierarchical connection, and configuring an entire network.

Abstract: Provided are a multi-channel tuning receiver, including: a broadband radio frequency (RF) tuner to receive a broadband signal, divide the broadband signal into a plurality of signals, tune the divided signals, combine the tuned signals into a single signal, and output the combined single signal; an analog-to-digital (A/D) converter to convert the combined single signal to digital signal; a channelizer to extract only a bonded channel from the digital signal; and a plurality of demodulators to demodulate the bonded channel, and a multi-channel tuning method thereof.

Abstract: A Secure Micro (SM) copy detection system includes at least one Access Point (AP) that is connected to at least one host group including at least one SM, at least one Multiple-Services Operator (MSO) that is used to manage the at least one SM and includes the at least one AP, and a host information management server that is used to perform authentication of the at least one SM and that is independently connected to the at least one MSO.

Abstract: Provided is a channel bonding receiving apparatus and method for expanding a channel bonding receiving band in a cable modem. The channel bonding receiving apparatus includes a channel bonding dividing unit for dividing a channel bonding broadband signal into a plurality of band signals and extracting a corresponding channel bonding signal from each of the divided band signals; and a channel routing unit for routing each of the extracted channel bonding signals to a corresponding demodulator.

Abstract: Disclosed is a downloadable conditional access system (DCAS) and an operational method thereof that distributes a part of a function of a Trusted Authority to each multiple system operator (MSO) to enable the MSO server to process authentication with respect to a secure micro (SM) chip and a transport processor (TP) chip, and thus, a normal DCAS service is possible even when there is a problem with a security, and a DCAS host terminal for rental use is effectively operated.

Abstract: The present invention relates to a technology of paring a secure micro (SM) and a transport processor (TP) in a downloadable conditional access system (DCAS). More specifically, predetermined security components generated by a trusted authority which is a certificate authority are previously embedded into the SM and the TP, and pairing between the SM and the TP is performed by association of the security components with the TA. Accordingly, safe pairing can be assured and the leakage of security information from the SM by malicious hacking can be prevented.

Abstract: A downloadable conditional access system (DCAS), a secure micro (SM), and a transport processor (TP), and a security authentication method using the same are provided. The DCAS provides a safe security environment through a security protocol which enables mutual authentication and secure channel establishment between the SM and the TP.

Abstract: A mutual authentication apparatus in a Downloadable Conditional Access System (DCAS) includes an announce protocol processor to authenticate SecurityAnnounce information using an Authentication Proxy (AP) and to transmit the authenticated SecurityAnnounce information to a Secure Micro (SM), a keying protocol processor to relay KeyRequest information and KeyResponse information between a Trusted Authority (TA) and the SM in response to the SecurityAnnounce information, a decryption unit to decrypt the KeyResponse information using the SM, an authentication protocol processor to determine whether a first encryption key of the KeyResponse information is identical to a second encryption key generated by the AP, and a download protocol processor to control DownloadInfo to be transmitted from the AP to the SM, the DownloadInfo permitting the SM to download SM Client Image information.

Abstract: A terminal authentication apparatus and method in a Downloadable Conditional Access System (DCAS) is provided. The terminal authentication method may determine whether terminal authentication information, received from a DCAS terminal, is valid by referring to a database, may transmit DCAS image information and pairing information about the terminal authentication information to a user terminal, when the terminal authentication information is valid, and thereby may enable the DCAS terminal to set the user terminal based on the pairing information.

Abstract: A mutual authentication method in a Downloadable Conditional Access System (DCAS) is provided. The mutual authentication method may receive authentication-related information about authentication between an authentication unit and a security module (SM) from a Trusted Authority (TA), generate an authentication session key using the authentication-related information, transmit the authentication session key by the authentication unit to the SM through a Cable Modem Termination System (CMTS), and control a Conditional Access System (CAS) software to be downloaded to the SM from the authentication unit, when the authentication is completed by the authentication session key.

Abstract: A technology that may efficiently detect a duplicated Downloadable Conditional Access System (DCAS) host in a DCAS is provided.