Independent external security module for a digitally upgradeable

Abstract

A decoder for descrambling encoded satellite transmissions comprises an internal security module and a resplaceable security module. The program signal is scrambled with a key and then the key itself is twice-encrypted and multiplexed with the scrambled program signal. The key is first encrypted with a first secret serial number (SSN.sub.1) which is assigned to a given replaceable security module. The key is then encrypted with a second secret serial number (SSN.sub.2) which is assigned to a given decoder. The decoder performs a first key decryption using the second secret serial number (SSN.sub.2) stored within the decoder. The partially decrypted key is then further decrypted by the replaceable security module using the first secret serial number (SSN.sub.1) stored within the replaceable security module. The decoder then descrambles the program using the twice-decrypted key. The replaceable security module can be replaced, allowing the security system to be upgraded or changed following a system breach. Either security module may become the active security module to finally decrypt the seed, selectable by a signal transmitted from the encoder. Also disclosed is a method for transmitting the encrypted keys and secret serial numbers to a plurality of broadcasters who may in turn multiplex this signal with their own program signals so that any given channel received by a subscriber contains the key and secret serial numbers. Additionally, the decoder may be upgradeable to accept both analog and digital video signals without significant redundant circuitry.