Abstract: Systems and methods for evaluating a customer premise equipment (CPE) device to determine whether it is being used to perpetuate theft of service (TOS). A computing system may be configured to collect raw data from a customer premise equipment (CPE) device associated with a subscriber account, determine TOS features based on the collected raw data, determine a risk score for the CPE based on the TOS features, determine whether the risk score exceeds a threshold value, and classifying the CPE device as a TOS device in response to determining that the risk score exceeds the threshold value.

Abstract: Establish a secure connection from a device to a server by, at the device: sending a shared secret request (SSRq) and an obfuscated secret value of the device to the server, wherein the SSRq is encrypted by a symmetric rolling key known to the device and to a trusted authority but not known to the server and the SSRq incorporates a symmetric key for decrypting the device's obfuscated secret value; receiving a shared secret response (SSRs) and an obfuscated secret value of the server, wherein the device's symmetric rolling key encrypts the SSRs and the SSRs incorporates a symmetric server obfuscation key for decrypting the server's obfuscated secret value; calculating a shared secret by hashing a concatenation of the device's secret value and the server's secret value; generating a symmetric session key based on the shared secret; and establishing the secure connection using the symmetric session key.

Abstract: Establish a secure connection from a device to a server by, at the device: sending a shared secret request (SSRq) and an obfuscated secret value of the device to the server, wherein the SSRq is encrypted by a symmetric rolling key known to the device and to a trusted authority but not known to the server and the SSRq incorporates a symmetric key for decrypting the device's obfuscated secret value; receiving a shared secret response (SSRs) and an obfuscated secret value of the server, wherein the device's symmetric rolling key encrypts the SSRs and the SSRs incorporates a symmetric server obfuscation key for decrypting the server's obfuscated secret value; calculating a shared secret by hashing a concatenation of the device's secret value and the server's secret value; generating a symmetric session key based on the shared secret; and establishing the secure connection using the symmetric session key.

Abstract: Systems and methods for evaluating a customer premise equipment (CPE) device to determine whether it is being used to perpetuate theft of service (TOS). A computing system may be configured to collect raw data from a customer premise equipment (CPE) device associated with a subscriber account, determine TOS features based on the collected raw data, determine a risk score for the CPE based on the TOS features, determine whether the risk score exceeds a threshold value, and classifying the CPE device as a TOS device in response to determining that the risk score exceeds the threshold value.

Abstract: Establish a secure connection from a device to a server by, at the device: sending a shared secret request (SSRq) and an obfuscated secret value of the device to the server, wherein the SSRq is encrypted by a symmetric rolling key known to the device and to a trusted authority but not known to the server and the SSRq incorporates a symmetric key for decrypting the device's obfuscated secret value; receiving a shared secret response (SSRs) and an obfuscated secret value of the server, wherein the device's symmetric rolling key encrypts the SSRs and the SSRs incorporates a symmetric server obfuscation key for decrypting the server's obfuscated secret value; calculating a shared secret by hashing a concatenation of the device's secret value and the server's secret value; generating a symmetric session key based on the shared secret; and establishing the secure connection using the symmetric session key.

Abstract: Various embodiments include computing devices and methods for provisioning a set top box (STB) with a software stack. A processor of a computing device may receive a software stack download request comprising downstream channel descriptor (DCD) information, determine region information for the STB based on the DCD information, determine a software stack authorization for the STB, select a software stack for the STB based on the region information and the software stack authorization for the STB, and obtain the selected software stack to enable the STB to replace existing software with the selected software stack.