Conditional access: Difference between revisions

Revision as of 13:11, 24 August 2022

Revision as of 13:15, 3 December 2022

Line 6:

{{Refimprove|date=March 2008}}

}}

'''Conditional access''' ('''CA''') is a term commonly used in relation to [[software]] and to [[digital television]] systems. Conditional access is that ‘just-in-time’ evaluation to ensure the person who is seeking access to content is authorized to access the content. Said another way, conditional access is a type of access management. Access is managed is by requiring certain criteria to be met before granting access to the content.

'''Conditional access''' (abbreviated '''CA''') or '''conditional access system''' (abbreviated '''CAS''') is the protection of content by requiring certain criteria to be met before granting access to the content. The term is commonly used in relation to [[digital television]] systems and to [[software]].

== In software ==

Conditional access is a function that lets you manage people’s access to the software in question, such as email, applications, documents and informationdocuments. It is usually offered as [[Software as a service|SaaS]] (Software-as-a-Service) and deployed in organizations to keep company [[data]] safe. By setting conditions on the access to this data, the organization has more control over who accesses the data and where and in what way the information is accessed.

When setting up conditional access, access can be limited to or prevented frombased on the chosenpolicy conditions.defined Thisby waythe it[[system canadministrator]]. beFor determined thatexample, fora example,policy might require access is only possibleavailable from certain networks, or preventedaccess fromis certainblocked browserswhen a specific [[web browser]] is requesting the access.

Possible conditions could be:

==In digital television==

* Geographical ___location

* [[IP address]] and network

* Used device

* [[Web browser|Browser]]

* [[Operating system|Operating System (OS)]]

When setting up conditional access, access can be limited to or prevented from the chosen conditions. This way it can be determined that, for example, access is only possible from certain networks or prevented from certain browsers.

Current providers of conditional access include:

* [[Microsoft]] (including [[Office 365]])

* [[Microsoft Azure|Azure Active Directory]]<ref>{{Cite web|url=https://docs.microsoft.com/nl-nl/azure/active-directory/conditional-access/overview|title=Wat is voorwaardelijke toegang in Azure Active Directory?|last=MicrosoftGuyJFlo|website=docs.microsoft.com|language=nl-nl|access-date=2019-09-23}}</ref>

* [[Workspace 365]]<ref>{{Cite web|url=https://workspace365.net/en/product-tour/workspace-management/|title=Workspace management|website=Workspace 365|language=en-US|access-date=2019-09-23}}</ref>

Conditional access can be offered with Microsoft Intune.<ref>{{Cite web|url=https://docs.microsoft.com/nl-nl/intune/conditional-access|title=Voorwaardelijke toegang met Microsoft Intune - Microsoft Intune|last=Brenduns|website=docs.microsoft.com|language=nl-nl|access-date=2019-09-23}}</ref>

==In Digital Video Broadcasting==

Under the [[Digital Video Broadcasting]] (DVB) standard, conditional access system (CAS) standards are defined in the specification documents for DVB-CA (conditional access), [[Common Scrambling Algorithm|DVB-CSA]] (the common [[Scrambler|scrambling]] algorithm) and [[DVB-CI]] (the [[Common Interface]]). These standards define a method by which one can obfuscate a digital-television stream, with access provided only to those with valid decryption [[smart cards|smart-cards]]. The DVB specifications for conditional access are available from the [https://web.archive.org/web/20130116162443/http://www.dvb.org/technology/standards/index.xml#conditional standards page on the DVB website].

Line 44 ⟶ 27:

Several companies provide competing CA systems; ABV, [[VideoGuard]], Irdeto, [[Nagravision]], [[Conax]], [[Viaccess]], [[Synamedia Ltd.|Synamedia]], [[Mediaguard]] (a.k.a. [[Nagra France|SECA]]) are among the most commonly used CA systems.

Due to the common usage of CA in DVB systems, many tools to aid in or even [[Pirate decryption|directly circumvent]] encryption exist. CAM emulators and multiple-format CAMs exist which can either read several card formats or even directly decrypt a compromised encryption scheme. Most multiple format CAMs and all CAMs that directly decrypt a signal are based on [[reverse engineering]] of the CA systems. A large proportion of the systems currently in use for DVB encryption have been opened to full decryption at some point, including Nagravision, Conax, Viaccess, Mediaguard (v1) as well as the first version of VideoGuard.

=== Conditional access in North America ===

In Canadian[[Canada]] and United States [[Cable television in the United States|cable systems]], the standard for conditional access is provided with [[CableCARD]]s whose specification was developed by the cable company consortium [[CableLabs]].

Cable companies in the USUnited States are required by the [[Federal Communications Commission]] to support CableCARDs; standards. nowStandards exist for two -way communication (M-card), but [[satellite television]] has its ownseparate standards. Next -generation approaches in the United States eschew such physical cards and employ schemes using downloadable software for conditional access such as [[Downloadable Conditional Access System|DCAS]].

The main appeal of such approaches is that the [[access control]] may be upgraded dynamically in response to security breaches without requiring expensive exchanges of physical [[conditional-access module]]s. Another appeal is that it may be inexpensively incorporated into non-traditional media display devices such as [[Portable media player|portable media players]].

=== Conditional access systems ===

Conditional access systems include:

==== Analog systems ====

*[[EuroCrypt]]

*[[Nagravision]]

Line 62 ⟶ 45:

*[[VideoCrypt]]

==== Digital systems ====

{|class="wikitable"

|-