Typically, a legitimate smart card is attached to a host digital television receiver, which is equipped with software to share the decrypted 64-bit "control word" key over a computer network, such as the Internet. Once a client receives this key, they can decrypt the encrypted content as though they were using their own subscription card.
Basic operation
The security of conditional access smartcard technology is limited by the security of the DVB standard in which it operates. The standard practice of a legitimate smart card is to decrypt an ECM (Entitlement Control Message), which then provides the control word, which allows the viewing of scrambled material.[1] With card sharing, however, the smart card and its security features are bypassed; software intercepts the decrypted control word and allows the user to share it across a computer network
Pirate decryption
Card sharing has established itself as popular method of pirate decryption. Much of the development of card sharing hardware and software has taken place in Europe, where national boundaries mean that home users are able to receive satellite television signals from many countries but are unable to legally subscribe to them due to licensing restrictions on broadcasters.
Because the length of the control word is so small (typically 64 bits), delivery of the control words to many different clients is easily possible on a home internet connection. This has sparked the creation of sharing network groups, in which users can access the group by sharing their subscription cards with the group, and in turn, being capable of receiving the channels which all users' cards can decrypt, as though the user owned every single subscription card connected to the network. Other networks have also been created, whereby one server has multiple legitimate subscription cards connected to it. Access to this server is then restricted to those who pay the server's owner their own subscription fee.
An example of such a card sharing system, also known as Internet Key Sharing (IKS) was ran by Charles Carillo of New Britain, Connecticut. Between 2007 - 2010 Carillo mass marketed so-called FTA receivers modified to illegally receive Dish Network subscription programming using a card sharing server. Carillo marketed such devices from several paper "front" companies such as nfusion.ws, WorldWide Satellite, Tequista Enterprises and Power Pay Services. In 2010 the satellite operation was shut down and Charles K. Carillo was found liable in Federal Court to Dish Network for $666,000 in damages.
Multiple receiver use
An arguably legitimate use for card sharing is the sharing of the control word within a home network, where the subscriber is authorised by the subscription television network to decrypt their signal, using one smart card. Content providers usually provide means for viewing channels on a second smart card, provided at extra cost. An example of this is *** Multiroom, used in the United Kingdom. However, in some cases the contract between the subscriber and the content provider implicitly or explicitly prohibits this kind of card sharing.
Countermeasures
Card sharing is a particular concern to conditional access providers, and their respective pay-TV companies, as well as the DVB consortium. Card sharing utilises the integral scrambling system of the DVB standard, DVB-CSA, meaning that every provider of scrambled DVB content has potential to be affected by it. In response, several counter measures have been implemented by various parties, with the aim of permanently preventing it.
Technical
One technical method, implemented by providers such as I***** and NDS, is to update the software of digital receivers provided by the subscription television service. This software implements a further decryption layer, held within the receiver. Rather than sending a plain text control word from the smart card to the receiver's microprocessor, which can be intercepted, the decrypted ECM will in fact be an encrypted control word, which can only be decrypted by a legitimate, non card sharing capable, receiver.[2] A simpler method, used by several providers, is to simply increase the frequency of control word changes. With changes occurring as frequently as once every few seconds, extra stress is put onto the smart card sharing system, meaning that clients may be frustrated by short, frequent, missed viewing periods
Legal
One significant problem for internet card sharing pirates is that their activities can be traced, through tracing of their unique IP address. Cases of criminal charges being brought against card sharing hosts is on the rise.[3][4] In August 2009, a Liverpool man was prosecuted for re-selling the services of a card sharing network to paying customers. It was the first such case of its type in the UK.
DVB-CSA3
In 2007, the DVB Project approved and began licensing a new scrambling system, CSA3, for protecting DVB content.[6] This new system, upon implementation, will attempt to eradicate many of the flaws with the original DVB-CSA system, including introducing an AES based 128-bit key system. The system will reportedly be "hardware friendly and software unfriendly", indicating that reverse engineering of the system, required for the creation of card sharing applications, will be very difficult.
:listen:
