Abstract: A subscriber terminal includes a digital conditional access module receiving a transport bitstream comprising a plurality of multiplexed conditional access and product packets. Selected ones of the conditional access packets are addressed to respective terminals and include an encrypted new decryption key code, an encrypted authorization bit map and an authorization list range delete code. The conditional access packets are decrypted by the conditional access modules of respective addressed terminals, the decrypted new decryption key code being stored for subsequent use by the conditional access module, the decrypted authorization bit map being used to refresh the authorization bit map memory of the module and the decrypted delete code being used to delete a specified range of authorization codes from the authorization list memory of the module.

Abstract: A digital conditional access module for a subscriber terminal comprises a decryption device including at least one PID register and an associated countdown register. The decryption device is enabled for decrypting received product packets having a PID matching a PID stored in the PID register so long as the associated countdown register is characterized by a non-zero value. Decryption of a product packet results in the countdown register being decremented by a selected factor, the countdown register being prevented from assuming a zero value by setting its contents to a selected value in response to a received conditional access packet containing a PID matching the PID stored in the PID register. The selected value to which the countdown register is set may also be contained within the received conditional access packet.