Abstract: Systems and methods are disclosed for distributing network traffic received from a plurality of client devices and bound toward a plurality of servers sharing a common network address. One method includes receiving network traffic from the plurality of client devices, addressed to an network address associated the servers; separating the received network traffic into assigned buckets based on a respective source network address associated with each unit of traffic; and forwarding the received traffic to one of a plurality of servers associated with the predetermined network address, based on the bucket assigned. The network traffic may be separated into assigned buckets by determining which subset of bits of an network address of a client device to evaluate for bucket separations. A netmask may be created based on the determined subset of bits, and each source network address may be mapped to one of the buckets using the netmask.

Abstract: Systems and methods are disclosed for distributing network traffic received from a plurality of client devices and bound toward a plurality of servers sharing a common network address. One method includes receiving network traffic from the plurality of client devices, addressed to an network address associated the servers; separating the received network traffic into assigned buckets based on a respective source network address associated with each unit of traffic; and forwarding the received traffic to one of a plurality of servers associated with the predetermined network address, based on the bucket assigned. The network traffic may be separated into assigned buckets by determining which subset of bits of an network address of a client device to evaluate for bucket separations. A netmask may be created based on the determined subset of bits, and each source network address may be mapped to one of the buckets using the netmask.

Abstract: An access control processor provides for display of a message related to an authorization status of an information receiver in a conditional access system for receiving an information segment when the information segment is provided separately by each of a plurality of different service providers. The processor processes a plurality of authorization signals respectively related to the information segment provided separately by the plurality of different service providers; determines which of a plurality of different possible authorization statuses is applicable for the received information segment for each of the respective authorization signals related to the different service providers; selects one of the determined statuses in accordance with a predetermined priority; selects from a plurality of different possible authorization status messages the message applicable to the status determined in accordance with said priority; and provides the selected message for display.

Abstract: An access control processor for a conditional access system. The processor includes a decryptor in an information receiver for decrypting encrypted information segments received by the information receiver by processing the received encrypted information segments with a session key used for encrypting the information segments in accordance with an algorithm utilized in a conditional access processes; and a conditional access controller in the information receiver for selectively enabling the decryptor to decrypt received information segments encrypted in accordance with the conditional access processes by providing to the decryptor cryptographic information for defining the algorithm utilized in the conditional access process for use by the decryptor to decrypt the received information segment encrypted in accordance with said algorithm. Algorithm-defining cryptographic information is downloaded from an information stream received by the information receiver.

Abstract: A device for mediating information management in a communications network for communications with a given network element having a given management-information protocol includes a NEDL file defining a structured network-element-description-language (NEDL) format referencing information-management roles pertaining to the given network element in accordance with the network-element management-information protocol; and a processor coupled to the NEDL file for recomposing messages received from of for communication to the network element. The mediation device may be configured for a given network element by adapting the NEDL file to define the management roles, parameters and resources of the given network element.

Abstract: An access control processor for a conditional access system in which encrypted information segments provided by a plurality of information service providers are encrypted for transmission in accordance with different conditional access processes respectively utilizing different algorithms for encrypting the information segments.

Abstract: A key security system provides for the reproduction of secure keys by using distributed key generation data and a distributed encrypted prekey. The system encrypts program key generation data with a program key prekey in accordance with a first encryption algorithm to produce the program key; processes the program key to produce a keystream; and processes an information signal with the keystream to produce a scrambled information signal. The program key prekey is encrypted with a category key in accordance with a second encryption algorithm to produce an encrypted program key prekey. The scrambled information signal, the program key generation data and the encrypted program key prekey are distributed to descramblers.

Abstract: A system in a subscriber television network for enabling descrambling of a received scrambled signal on a prepaid basis and/or an impulse-purchase basis. A received mask signal uniquely related to the scrambled signal is compared with a received authorization signal indicating whether the subscriber is authorized to receive the scrambled signal on a prepaid basis and a prepaid signal for enabling descrambling is provided when the compared signals match. A not-prepaid signal is provided when they do not match. A received cost signal indicating the charge for descrambling the scrambled signal and a received credit signal indicating the subscriber's endlessly accumulated credit are processed with reference to a stored record of the subscriber's prior accumulated charges to determine whether the subscriber has sufficient available credit to pay for descrambling of the scrambled signal.