Conditional Access System including SMS

SCALABLE FOR ANY SIZE OF OPERATOR
COST EFFECTIVE & FAST DEPLOYMENT

CryptoGuard’s CAS is one of the most flexible and secure Pay-TV content protection solutions in the market today offering low entry cost and an attractive pay-as-you-grow business model. The system is ideal for securing any size of network and can scale from few hundreds to millions of subscribers.

CAS_Girl watching secured TV

Turn-key CAS & SMS Solution

CryptoGuard CAS utilizes advanced security and is constantly improved with the latest innovations in encryption, software obfuscation and hardening security. CryptoGuard CAS is ideal for any size of operator and can scale up to millions of subscribers. It supports any business model and facilitates DRM and OTT for anywhere, -any device viewing experience.

Farncombe security audit CAS

Advanced security

CryptoGuard CAS is utilizing security modules on the head end side, with the most secure hardware. On the STB and CAM side, CryptoGuard CAS has always used secure paring with link protection to avoid control word sharing. CryptoGuard CAS is utilizing advanced security embedded in DVB chipsets from the major chipset vendors for both Cardless and Smartcard based solutions.  In addition to storing secrets in highly secure chipsets, software obfuscation and the strongest encryption technology is used to avoid device cloning, control word sharing or any other piracy threats.

CryptoGuard Smartcards always use the most secure chips available on the market. These chips are state-of-the-art EAL5+ certified and rigorously tested.

CryptoGuards CAS solution schematic overview

CryptoGuard CAS Scheme

CAS & SMS System Overview

Core Server

  • CryptoGuard CAS can run all of its core applications on one single server and can easily be scaled up for very large operations by connecting more sub servers with optional redundancy.
  • CryptoGuard CAS can be configured to support any topology of network.
  • One central CryptoGuard CAS Core Server can control many ECM Generators and EMM Injectors that are placed in different locations. Thereby, cable networks in different locations or different satellite uplinks can be centrally operated as one system from one CryptoGuard CAS Core Server.
  • CryptoGuard CAS can run all of its core applications on one single server and can easily be scaled up for very large operations by connecting more sub servers with optional redundancy.
  • CryptoGuard CAS can be configured to support any topology of network.
  • One central CryptoGuard CAS Core Server can control many ECM Generators and EMM Injectors that are placed in different locations. Thereby, cable networks in different locations or different satellite uplinks can be centrally operated as one system from one CryptoGuard CAS Core Server.

SMS – Web interface for control of CAS/DRM and OTT

The SMS allows you to manage subscribers, client devices, content, ordering, customer care, billing etc. The architecture is open, based on a MySQL database and Linux, and there is a full set of APIs available for integration with third party systems. CryptoGuard CAS can be extended with the CryptoLITE OTT solution and DRM security. All DVB and OTT subscribers and client devices are seamlessly managed via the CAS core server.

CAS

  • Subserver and redundancy management
  • Subscriber management
  • Content management
  • Client device management, STBs, CAMs and dongles
  • Fingerprinting EMM & ECM
  • STB force tuning and messaging
  • Module settings: API, PSI/SI, EPG, OTA and IPTV

OTT System and DRM

  • Subscriber management
  • Content management
  • User device control: Mobiles, SmartTVs and STBs
  • DRM settings: Content rights, Device count, Geo-blocking

CAS

  • Subserver and redundancy management
  • Subscriber management
  • Content management
  • Client device management, STBs, CAMs and dongles
  • Fingerprinting EMM & ECM
  • STB force tuning and messaging
  • Module settings: API, PSI/SI, EPG, OTA and IPTV

OTT System and DRM

  • Subscriber management
  • Content management
  • User device control: Mobiles, SmartTVs and STBs
  • DRM settings: Content rights, Device count, Geo-blocking
CryptoGuard SMS menu

Customer/ DevicesAccess criteriasProductsReportsAdministrationConfigurationPSI/SI insertLog filesDRM/OTT (Optional)
Manage customersManage access criteriasChannel packagesActivation historyManage usersBackupEIT ContainersAlarm logEncryptor services
Manage devicesManage access criteria profilesServicesActive devicesManage rolesEMM fingerprintingIPTV channel listSystem logGeo filters
Advanced searchPPV programsCustomer groupsBroadcaster reportIP access listEMM OTA triggersPSI/SIUser logStream profiles
Reseller customer formPPV program managerArticlesCard statisticsForce tuningIP EMM logAssets
File importManage price changesCard versionsIP setup
Reseller package group namesChannel statisticsManage networks
BroadcastersCustomer definition channel stat'sMessages
EMM statisticsMulticast EMM
Ended subscriptionsOTA player
Generate card numbersPDF contract template
Inactive customersProcess control
Invoice listRoutes setup
Message queuesSimulcrypt ECM
Package statisticsSimulcrypt EMM
Paired STB'sSystem setup
PPV order history
Subscriber list
Valid subscriptions

Optional modules

  • API - for 3rd party system integration
  • EPG – Collects and sends EPG data to users. The EPG module can be used in sub server or as a separate unit in any DVB network. The EPG module is also available for stand-alone EPG Server for CATV Headends with support for both DVB and ISDB-Tb (Brazil) standard.
  • IPTV – For cost effective DVB-IPTV system. Provides CAS and basic middleware EPG / Channel list to IPTV STB’s. No need for costly 3rd party middleware.
  • PSI/SI – Configure TV channels in e.g. sub networks where local head ends are used with different configuration. Generates and inserts NIT, SDT, SDT other, TDT, TOT, CAT, PAT, BAT and EIT tables for configuration of channel lists, frequency tables and the program guide (EPG).
  • OTA Player –Allows “Over-The-Air” firmware upgrade of Set Top Boxes, CA modules and Dongles
  • API - for 3rd party system integration
  • EPG – Collects and sends EPG data to users. The EPG module can be used in sub server or as a separate unit in any DVB network. The EPG module is also available for stand-alone EPG Server for CATV Headends with support for both DVB and ISDB-Tb (Brazil) standard.
  • IPTV – For cost effective DVB-IPTV system. Provides CAS and basic middleware EPG / Channel list to IPTV STB’s. No need for costly 3rd party middleware.
  • PSI/SI – Configure TV channels in e.g. sub networks where local head ends are used with different configuration. Generates and inserts NIT, SDT, SDT other, TDT, TOT, CAT, PAT, BAT and EIT tables for configuration of channel lists, frequency tables and the program guide (EPG).
  • OTA Player –Allows “Over-The-Air” firmware upgrade of Set Top Boxes, CA modules and Dongles

Sub Network

  • Networks extended over a larger geographic area with different frequency tables or having several head-ends, it can be necessary to separate components from the main server. An example is an additional PSI/SI server, ECM or EMM server.
  • The EPG module can be installed separately on a sub server and it can also be used as a stand-alone EPG server in TV head-ends supporting both DVB and ISDB-Tb (Brazil) standards.
  • Networks extended over a larger geographic area with different frequency tables or having several head-ends, it can be necessary to separate components from the main server. An example is an additional PSI/SI server, ECM or EMM server.
  • The EPG module can be installed separately on a sub server and it can also be used as a stand-alone EPG server in TV head-ends supporting both DVB and ISDB-Tb (Brazil) standards.

CryptoLITE OTT & DRM

  • CryptoGuard CAS can also be extended with the cost-effective CryptoLITE end-to-end OTT Solution containing OTT Server, Transcoder, Origin Server, CDN Servers and apps for iOS, Android, Smart TVs and STBs. 
  • CryptoLITE solution also includes CryptoGuard DRM where the Pay TV operator can manage content and subscribers from the CAS core server.
  • CryptoGuard DRM supports the most popular formats Widevine, FairPlay and PlayReady enabling a highly secure content delivery. These DRMs are natively supported by the majority of client devices and are approved by major studios.
  • CryptoGuard CAS can also be extended with the cost-effective CryptoLITE end-to-end OTT Solution containing OTT Server, Transcoder, Origin Server, CDN Servers and apps for iOS, Android, Smart TVs and STBs. 
  • CryptoLITE solution also includes CryptoGuard DRM where the Pay TV operator can manage content and subscribers from the CAS core server.
  • CryptoGuard DRM supports the most popular formats Widevine, FairPlay and PlayReady enabling a highly secure content delivery. These DRMs are natively supported by the majority of client devices and are approved by major studios.

Redundancy

  • CryptoGuard CAS can be configured to support any topology of network and one central CAS Server can control many ECM Generators and EMM Injectors (CryptoGuard Sub-Servers).
  • ECM generator can be separated from the main server and installed on a sub-server, which communicates with the main server. This can be done to enhance performance, since ECM generation is the heaviest and most sensitive part of a CAS system.
  • A second ECM server may also be installed out of redundancy reasons, where the head-end scrambler detects if one ECM server goes down, to automatically connect to second one.
  • EMM can also be installed on a separate sub-server to ease the burden of the main server.
  • With this concept it’s possible to add several CryptoGuard Sub-Servers to achieve the needed performance. By adding more CryptoGuard CAS Core Servers and CryptoGuard Sub-Servers, CryptoGuard CAS can scale up to very large numbers of subscribers.

Contact us for more information about CryptoGuard’s CAS scalability and redundancy options.

  • CryptoGuard CAS can be configured to support any topology of network and one central CAS Server can control many ECM Generators and EMM Injectors (CryptoGuard Sub-Servers).
  • ECM generator can be separated from the main server and installed on a sub-server, which communicates with the main server. This can be done to enhance performance, since ECM generation is the heaviest and most sensitive part of a CAS system.
  • A second ECM server may also be installed out of redundancy reasons, where the head-end scrambler detects if one ECM server goes down, to automatically connect to second one.
  • EMM can also be installed on a separate sub-server to ease the burden of the main server.
  • With this concept it’s possible to add several CryptoGuard Sub-Servers to achieve the needed performance. By adding more CryptoGuard CAS Core Servers and CryptoGuard Sub-Servers, CryptoGuard CAS can scale up to very large numbers of subscribers.

Contact us for more information about CryptoGuard’s CAS scalability and redundancy options.

Consumer devices

CryptoGuard has an extensive partner ecosystem and can offer a wide range of card-based and cardless client devices.

Set Top Box

  • Card based and cardless
  • DVB-S/S2, DVB-T/T2, DVB-C, DVB-IPTV
  • Zappers, DVB Hybrid, DVB/Android
  • SD, HD, MPEG-2, MPEG-4, HEVC

CA-module

  • Card based and cardless
  • Professional CAM up to 16 services

Pay TV Dongle

  • Adds DVB pay TV channels to Android mobile devices or STBs

Are you ready to up your security and down your costs!?