smartcard theory & ECM EMM?Discussion on the Irdeto encryption technique | |
![]() |
| | LinkBack | Thread Tools | Display Modes |
![]() | ![]() |
| |||||||
smartcard theory & ECM EMM?Discussion on the Irdeto encryption technique | |
![]() |
| | LinkBack | Thread Tools | Display Modes |
| | #1 | ||
| Member Join Date: 21-03-2006 Location: FR
Posts: 21
Thanks: 0
Thanked 0 Times in 0 Posts
My System: Humax |
Hi, I want to smartcard technology (used in Digital Receiver) in detailed. Is there any books/tuto available? I want to know how a encrypted channel is decrypted also how a subscription is managed. I guess I need to learn HMK,PMK,MK ECM EMM etc. If you anyone can give this info in detailed..... Thanks, Bye BT | ||
| |
| | #2 | ||
| Believe it when I see it Admin. Real name: Rolf Join Date: 01-05-1999 Location: Southern England
Posts: 29858
Thanks: 51
Thanked 1095 Times in 691 Posts
Blog Entries: 5 My System: Pace Sky HD, DM7000s, CubeRevo 3000HDPVR, Transparent 80cm Dish, Moteck SG2100 DiseqC motor, lots of legacy gear. Meters: Satlook Digital NIT, Televes H45 Digital Spectrum analyser. | Have a look here for some good basics. | ||
| | |||
| |
| | #3 | ||
| Regular Member Join Date: 20-04-2006 Location: Lost in the night
Posts: 112
Thanks: 2
Thanked 6 Times in 6 Posts
My System: ? | DVB protocol describes a scarmbling lagorithm. This algorithm is called CSA, Common Scrambling Algorithm. Every provider uses this algorithm. In it's simplest way of implementing scrambled transmission, the operators scarmbls the service with a fixed key. Every one who is supposed to receive this service gets the fiexed key and he receives the service. This method is used for connections from one partner to another. It is not convenient for operator to use it for their broadcasting. In order to broadcast, they use one encryption system: Irdeto2, Viaccess etc How it works? Firstly, the encryption system generates a random key for CSA. The service is scrambled with the key. Then, the key is encrypted by the proprietary (and also TOP SECRET) algorithm of the encryption system. ECM contains the encrypted key.The CAM/smartcard decrypts the key. Then, the receiver gets the key and descrambls the service. It is possible for an operator to use more than one scrambling systems. The service is scrambled, the encryption system encrypt the key. Finally, different ECMs are transmitted, one for every scrambling system. | ||
| |
| The Following User Says Thank You to tesla For This Useful Post: | De Fault (13-05-2008) |
| | #5 | ||
| Regular Member Join Date: 20-04-2006 Location: Lost in the night
Posts: 112
Thanks: 2
Thanked 6 Times in 6 Posts
My System: ? | When a new customer subscribes, the technical staff of the operator sends a command to the smartcard. This command assigns the appropriate products to the smartcard. When the customer stops his subscription, then the technical staff sends another command to the smartcard. This commands removed any asigned product from the smartcard. | ||
| |
| | #6 | |||
| Member Join Date: 13-05-2008 Location: Thailand
Posts: 1
Thanks: 1
Thanked 0 Times in 0 Posts
My System: ARM Developer Suite AXD Debugger ARM processor emulator |
To be more precise, I believe the decrypted key can probably be found in the CAM's RAM memory? Please correct me if I am wrong. Are there any Irdeto CAM's based on the ARM processor? Is there a JTAG interface test points available in the CAM? Did anyone try to examine the CAM's PCB? Can we have access to the CAM's PCB and JTAG test points? Please e-mail me at REMOVED | |||
| Last edited by mhku; 13-05-2008 at 11:03 AM. | ||||
| |
| | #7 | ||
| Member Join Date: 12-01-2009 Location: india
Posts: 7
Thanks: 1
Thanked 0 Times in 0 Posts
My System: insat4-A and high end computer with tv tuner card. | I don't think there are any jtag communication thing . Why would they give it in first place (security issue.). the cam has 2 modules 1. the pcmcia card 2 the smart card together they make the CAM . I am not sure if the control word(Decrypted key) goes out of the cam.So it would never come to the RAM.The Jtag interface is usually present on the STB hardware board. used to load the linux image onto the board.u can access by opening the STB. but would not be much of use. | ||
| |
| | #8 | ||
| Regular Member Join Date: 20-04-2006 Location: Lost in the night
Posts: 112
Thanks: 2
Thanked 6 Times in 6 Posts
My System: ? | Actually it does. This is the weak point of the whole system and some programmers tookadvantage of it. Otherwise, there whould be no key sharing and dreamboxes whould not be so popular. | ||
| |
| | #10 | ||
| Member Join Date: 30-01-2007 Location: South coast of Devon
Posts: 22
Thanks: 2
Thanked 2 Times in 2 Posts
My System: CM1.2m Relook receiver | Hi Tesla, Why would the key ever leave the CAM as the decryption takes place inside the CAM smartcard, not in the receiver ? Cheers, GB | ||
| |
| The Following User Says Thank You to gbrowne For This Useful Post: | jose123 (30-08-2009) |
| | #11 | ||
| Specialist Contributor Join Date: 09-09-2008 Location: Republic of Georgia
Posts: 913
Thanks: 14
Thanked 258 Times in 199 Posts
My System: Covering 30W-105.5E range, two motors, C and Ku band. Various receivers/cards/cams/etc. | SMiT (smit.com.cn) modules do have certain point of JTAG connector inside. But require proprietary software, since rom image is encrypted. | ||
| |
| The Following User Says Thank You to BombedOne For This Useful Post: | jose123 (30-08-2009) |
| | #12 | ||
| Member Join Date: 21-06-2007 Location: Eastern Australia
Posts: 2
Thanks: 0
Thanked 2 Times in 2 Posts
My System: nokia 9500, 5 dishes | Well I feel that they must have a way of addressing the smart card, that has never been shown to us. It would be nice if we could find out the pid that is used to address the card with info to make it work, this would be other than the EMM's, ECM's, Card files and cam keys. Something in the data stream looks at the card through the cam and knows if it is ok and what channels are allowed to be recieved. Even if that part of the data stream is incripted FM Card has a program to change a cripted number to clear. Am I making any sense to any one at all? The system I'm looking at is irdeto 2. | ||
| |
| The Following User Says Thank You to bellesdad For This Useful Post: | jose123 (30-08-2009) |
| | #13 | ||
| Member Join Date: 30-01-2007 Location: South coast of Devon
Posts: 22
Thanks: 2
Thanked 2 Times in 2 Posts
My System: CM1.2m Relook receiver | Sorry Tesla, I was wrong. As you correctly said, the Control Word is passed to the reciver to enable it to unscramble the scrambled stream. | ||
| |
| The Following User Says Thank You to gbrowne For This Useful Post: | jose123 (30-08-2009) |
| | #14 | ||
| Member Join Date: 22-12-2006 Location: Pakistan
Posts: 4
Thanks: 0
Thanked 1 Time in 1 Post
My System: DM 500 & worldinboxII | I used to work for a channel which was working on Irdeto II.and i know that each subscription card has a unique number which has to be entered in the mcrypt system.after that we have to activate the card then the card starts working.if you try to activate any other card it wont work unless it has been added in the mcrypt system.and the system keeps sending emm & ecms via a generator every 3 to 5 seconds to the card. | ||
| |
| The Following User Says Thank You to cannon_29 For This Useful Post: | jose123 (30-08-2009) |
| | #15 | ||
| Amo Amas Amant Admin Join Date: 18-11-2004 Location: Blackburn NW England (Siberia)
Posts: 11284
Thanks: 24
Thanked 505 Times in 464 Posts
My System: IDD CI24 ECONO MM Penta 1.20 Galaxy II 1.2Mtr Polar MTG yes it has been on the arc for 21 years and is still driven by a modified wiper motor from a Ford Anglia. It's like me sometimes groans but always performs ![]() Saved us from the black plague of ignoratio elenchi, he awaits a special badge with jugs |
The recent posts have been moved to their own new thread Can I reveal the transmission rate of ECMs/EMMs? | ||
| | |||
| |
| The Following User Says Thank You to Topper For This Useful Post: | gbrowne (01-10-2009) |
![]() |
| Bookmarks |
| Tags |
| ecm, emm, smartcard, theory |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| Display Modes | |
| |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| What do I need to read and extract the keys from a official Irdeto1 smartcard ? | tisurame | Irdeto system | 13 | 22-10-2005 09:25 PM |
| Smartcard ERROR ( no ATR ) | sputnick | X-CAM, Ultra CAM, Dragon CAM, Diablo, T Rex | 10 | 17-06-2005 05:10 PM |
| csat & phoenix smartcard | edmond1 | Cards & Programmers General | 1 | 28-04-2004 06:44 PM |
| Unification Theory | orphidian | Einstein's Alcove | 31 | 06-02-2004 01:43 AM |
| viaccess smartcard | radiotech | Viaccess | 3 | 22-05-2003 03:13 PM |