Conditional access: Difference between revisions

Revision as of 11:27, 7 February 2024

Latest revision as of 02:03, 21 April 2025

(12 intermediate revisions by 8 users not shown)

Line 4:

{{original research|date=January 2015}}

{{globalize|date=January 2015}}

{{RefimproveMore citations needed|date=March 2008}}

}}

'''Conditional access''' ('''CA''') is a term commonly used in relation to [[software]] and to [[digital television]] systems. Conditional access is that ‘just-in-time’an evaluation to ensure the person who is seeking access to content is authorized to access the content. Said another way, conditional access is a type of access management. Access is managed by requiring certain criteria to be met before granting access to the content.

== In software ==

Conditional access is a function that lets youan organization manage people’speople's access to the software in question, such as email, applications, and documents. It is usually offered as [[Software as a service|SaaS]] (Software-as-a-Service) and deployed in organizations to keep company [[data]] safe. By setting conditions on the access to this data, the organization has more control over who accesses the data and where and in what way the information is accessed.

When setting up conditional access, access can be limited to or prevented based on the policy defined by the [[system administrator]]. For example, a policy might require that access is available from certain networks, or access is blocked when a specific [[web browser]] is requesting the access.

When setting up conditional access, access can be limited to or prevented based on the policy defined by the [[system administrator]]. For example, a policy might require access is available from certain networks, or access is blocked when a specific [[web browser]] is requesting the access.

==In digital television==

Under the [[Digital Video Broadcasting]] (DVB) standard, conditional access system (CAS) standards are defined in the specification documents for DVB-CA (conditional access), [[Common Scrambling Algorithm|DVB-CSA]] (the common [[Scrambler|scrambling]] algorithm) and [[DVB-CI]] (the [[Common Interface]]).<ref>{{Cite web |title=Security |url=https://dvb.org/solutions/security/ |access-date=2022-12-05 |website=DVB |language=en-US |archive-date=2022-12-05 |archive-url=https://web.archive.org/web/20221205161912/https://dvb.org/solutions/security/ |url-status=live }}</ref> These standards define a method by which one can obfuscate a digital-television stream, with access provided only to those with valid decryption [[smart cards|smart-cards]]. The DVB specifications for conditional access are available from the [https://web.archive.org/web/20130116162443/http://www.dvb.org/technology/standards/index.xml#conditional standards page on the DVB website].

Line 21 ⟶ 22:

The contents of ECMs and EMMs are not standardized and as such they depend on the conditional access system being used.<ref>[https://www.itu.int/dms_pubrec/itu-r/rec/bt/R-REC-BT.1852-1-201701-I!!PDF-E.pdf Conditional-access systems for digital broadcasting 2016-10] {{Webarchive|url=https://web.archive.org/web/20230301233307/https://www.itu.int/dms_pubrec/itu-r/rec/bt/R-REC-BT.1852-1-201701-I!!PDF-E.pdf|date=2023-03-01}}</ref>

The control word can be transmitted through different ECMs at once. This allows the use of several conditional access systems at the same time, a DVB feature called ''simulcrypt'', which saves bandwidth and encourages multiplex operators to cooperate. [https://web.archive.org/web/20130116162443/http://www.dvb.org/technology/standards/index.xml#conditional DVB Simulcrypt] is widespread in Europe; some channels, like the [[CNN International]] Europe from the [[Hot Bird]] satellites, can use 7seven different CA systems in parallel.

The decryption cards are read, and sometimes updated with specific access rights, either through a [[conditional-access module]] (CAM), a [[PC card]]-format card reader meeting DVB-CI standards, or through a built-in [[ISO/IEC 7816]] card reader, such as that in the [[Digibox (Sky Digital)|Sky Digibox]].

Line 27 ⟶ 28:

Several companies provide competing CA systems; ABV, [[VideoGuard]], Irdeto, [[Nagravision]], [[Conax]], [[Viaccess]], [[Synamedia Ltd.|Synamedia]], [[Mediaguard]] (a.k.a. [[Nagra France|SECA]]) are among the most commonly used CA systems.

Due to the common usage of CA in DVB systems, many tools to aid in or even [[Pirate decryption|directly circumvent]] encryption exist. CAM emulators and multiple-format CAMs exist which can either read several card formats or even directly decrypt a compromised encryption scheme. Most multiple format CAMs and all CAMs that directly decrypt a signal are based on [[reverse engineering]] of the CA systems. A large proportion of the systems currently in use for DVB encryption have been opened to full decryption at some point, including Nagravision, Conax, Viaccess, Mediaguard (v1) as well as the first version of VideoGuard.

=== Conditional access in North America ===

In [[Canada]] and [[the United States]], the standard for conditional access is provided with [[CableCARD]]s whose specification was developed by the cable company consortium [[CableLabs]].

Cable companies in the United States are required by the [[Federal Communications Commission]] to support CableCARDs. Standards exist for two-way communication (M-card), but [[satellite television]] has separate standards. Next-generation approaches in the United States eschew such physical cards and employ schemes using downloadable software for conditional access such as [[Downloadable Conditional Access System|DCAS]].

The main appeal of such approaches is that the [[access control]] may be upgraded dynamically in response to security breaches without requiring expensive exchanges of physical [[conditional-access module]]s. Another appeal is that it may be inexpensively incorporated into non-traditional media display devices such as [[Portable media player|portable media players]]modules.

=== Conditional access systems ===

Line 52 ⟶ 53:

| 0x4AEB || Abel Quintic || Abel DRM Systems || 2009 || Secure ||

|-

| 0x4AF00x4A64, 0x4AF0, 0x4AF2 , 0x4B4B, 0x4B4C || ABV CAS || ABV International Pte. Ltd || 2006 || Secure (Farncombe Certified) ||CA, DRM, Middleware & Turnkey Solution Provider For DTH, DVBT/T2, DVBC, OTT, IPTV, VOD, Catchup TV, Audience Measurement System, EAD etc.

|-

| 0x4AFC || Panaccess || Panaccess Systems GmbH || 2010 || Secure (Farncombe Certified) || CA for DVB-S/S2, DVB-T/T2, DVB-C, DVB-IP, OTT, VOD, Catchup etc.

Line 77 ⟶ 78:

|-

| 0x2600

0x2610

| [[BISS]]

BISS-E

| [[European Broadcasting Union]] || 2002

2018

Line 134 ⟶ 132:

| Compromised || [[DVB-S2]] compatible, used for retail BUD dish service and for commercial operations as source programming for cable operators.

Despite the Programming Center shutshutting down its consumer usage of DigiCipher 2 (as 4DTV) on August 24, 2016, it is still being used for cable headends across the United States, as well as on Shaw Direct in Canada.

|-

| 0x4A70 || DreamCrypt || Dream Multimedia || 2004

Line 148 ⟶ 146:

| ||

|-

|0x5448,0x6448

|Gospell VisionCrypt

|GOSPELL DIGITAL TECHNOLOGY CO., LTD.

Line 161 ⟶ 159:

|-

|-

| 0x0606 || Irdeto 1 || Irdeto || 1995 || rowspan="2" | Compromised (Cardsharing and MOSC available) || rowspan="2" |

|-

| 0x0602, 0x0604, 0x0606, 0x0608, 0x0622, 0x0626, 0x0664, 0x0614 || Irdeto 2 || Irdeto || 2000

|-

| 0x06020x0624, 0x06040x0648, 0x06060x0650, 0x0608,0x0639 0x0622,|| 0x0626,Irdeto 0x0664,3 0x0614 || Irdeto 2 || Irdeto2010 || 2000Compromised (Cardsharing available) ||

|-

| 0x0692, 0x06A4, 0x06B6, 0x069F, 0x06AB, 0x06F1 || Irdeto 3Cloaked || Irdeto || 2010Unknown || Secure ||

|-

| 0x4AA1 || [[KeyFly]] || SIDSA || 2006

Line 246:

| 0x0911, 0x0960 || Synamedia [[VideoGuard]] 2 || [[NDS Group|NDS (now part of Synamedia)]] || 1999 || Secure || rowspan="3" |

|-

| 0x0919, 0x0961, 0x09AC, 0x09C4, 0x091F, 0x0944, 0x09AA || Synamedia [[VideoGuard]] 3 || [[NDS Group|NDS (now part of Synamedia)]] ||2004 || Secure

|-

| 0x0927, 0x09BF, 0x0910, 0x0913, 0x098C, 0x098D, 0x098E, 0x0911, 0x0950, 0x09BB, 0x0987, 0x0963, 0x093b0x093B, 0x09CD || Synamedia [[VideoGuard]] 4 || [[NDS Group|NDS (now part of Synamedia)]] ||2009 || Secure

|-

|-