IP Democracy: Cable Commits to Downloadable Security for Two-Way Devices

In a move that could break the stalemate that’s been holding up the retail sales of digital cable TV set-tops, the National Cable & Telecommunications Association (NCTA) and the Consumer Electronics Industry Association (CEA) have agreed to a plan calling for downloadable security technology for the two-way versions of the devices. Under the 1996 Telecom Act, cable operators are required to ready their set-tops for retail availability, a mandate fraught with problems because the encryption and security technologies currently physically embedded in the devices open the door to massive theft if code hackers get their hands on a box by simply buying one at a store.

The two industries already have reached agreement on a solution for one-way cable technology, or unidirectional digital cable ready products (UDCPs) under a “plug-and-play” agreement between NCTA and CEA. Using separable CableCard technology developed under the industry’s OCAP (open cable open applications platform) standard, CE makers can manufacturer devices for sale at retail, with cable operators providing the security in separate cards.

But the development of security technology for two-way devices, known as interactive digital cable ready devices (IDCPs), has taken longer. Therefore, earlier this year the FCC pushed back the deadline for two-way devices from July 2006 to July 2007, and suggested that cable explore the idea of developing more secure, downloadable encryption methods for its interactive boxes. The cable industry fulfilled that request and did it one better by submitting a set of voluntary commitments and proposed regulations that would allow CE makers to not only manufacture interactive digital cable set-tops but also digital-ready TV sets and other devices that don’t need set-tops at all.

With the security issue out of the way, device manufacturers can incorporate all the rest of the hardware and software normally found in the set-top box directly into the units, with cable operators offering downloadable security that can be changed out quickly if security has been compromised. NCTA said that deployment of such a system, called Downloadable Conditional Access System (DCAS), is “feasible with an expected national rollout of a downloadable security system by July 1, 2008,” one-year after the rescheduled proposed deadline. (More details can be found here and here.)

Posted by Cynthia Brumfield on December 1, 2005 11:07 AM to IP Democracy