Abstract: The systems and method disclosed herein address introduce identifiers within the individual entitlement management messages (EMMs) addressed to that client that uniquely identify the combination of system and subscriber account to which the client is deployed, and use of them to issue automatic ‘factory reset’ behavior when the client is re-authorized for the new subscriber. In one embodiment, the EMM messages used to trigger the reset behavior are cryptographically signed specifically for the individual client to ensure that such a message cannot be maliciously sent by an untrusted third party. The facility to deliver such a message is already available within the conditional access system (CAS).

Abstract: A system and method for of providing secure communication between a client device having a non-volatile read only memory and a first server is disclosed. One embodiment is evidenced by a method that comprises determining if a generation of a certificate is complete, the certificate generated in the client device and having a public key generated from a private key, providing the generated certificate to the first server to authenticate the client device if the generation of the certificate is complete, and retrieving a fallback certificate from the non-volatile read only memory and providing the fallback certificate to the first server to ephemerally authenticate the client device until the generated certificate is provided to the first server if the generation of the certificate is not complete.

Abstract: The systems and method disclosed herein address introduce identifiers within the individual entitlement management messages (EMMs) addressed to that client that uniquely identify the combination of system and subscriber account to which the client is deployed, and use of them to issue automatic ‘factory reset’ behavior when the client is re-authorized for the new subscriber. In one embodiment, the EMM messages used to trigger the reset behavior are cryptographically signed specifically for the individual client to ensure that such a message cannot be maliciously sent by an untrusted third party. The facility to deliver such a message is already available within the conditional access system (CAS).

Abstract: A system and method for of providing secure communication between a client device having a non-volatile read only memory and a first server is disclosed. One embodiment is evidenced by a method that comprises determining if a generation of a certificate is complete, the certificate generated in the client device and having a public key generated from a private key, providing the generated certificate to the first server to authenticate the client device if the generation of the certificate is complete, and retrieving a fallback certificate from the non-volatile read only memory and providing the fallback certificate to the first server to ephemerally authenticate the client device until the generated certificate is provided to the first server if the generation of the certificate is not complete.