What Is Conditional Access System?

How scrambling, entitlements and control words fit together

A conditional access system, usually shortened to CAS, sits between a pay-TV operator's headend and the subscriber's receiver. The operator scrambles each channel once, for everyone, using a short-lived key called a control word. The control word itself travels inside the broadcast in encrypted form, in what are known as entitlement control messages. A second stream of messages, entitlement management messages, tells each individual smart card or software client which packages it is entitled to.

The receiver only descrambles a channel if its card holds a valid entitlement and can decrypt the control word. Because the control word changes every few seconds, a leaked key is worth very little on its own. Cancelling a subscription is a matter of sending a new entitlement message rather than touching the box. That design suits satellite, cable and terrestrial pay-TV, where one signal reaches a very large number of receivers and the operator cannot hold a separate conversation with each of them.

Card sharing and the decoded output problem

Pirates rarely attack the scrambling algorithm. The more common route is card sharing: a genuine card sits in a server, decrypts each control word as it arrives and passes it over the internet to many receivers that have no subscription. Operators respond by detecting unusual card behaviour, pairing cards to specific receivers and pushing security updates over the air.

The larger gap is after descrambling. A paying subscriber can take the decoded picture from the receiver output, encode it and push it to a server that feeds a pirate IPTV service or a live-stream site. At that point the CAS has done exactly what it was built to do. The channel was delivered to an authorised receiver; what happened next is outside its reach.

Conditional access versus DRM

The two terms are often used interchangeably, but they come from different delivery models. Conditional access grew up around one-way broadcast and scrambles a shared signal. Digital rights management is built for internet delivery, where each player requests its own licence from a server and the licence can carry per-device rules. Many operators now run both: CAS for the broadcast feed and DRM for their streaming apps.

What a rights holder looks for in a restreamed channel

When a pay-TV channel turns up on a pirate service, analysts check for the broadcaster's on-screen logo, overlaid graphics and the timing of the feed against the live broadcast. Those details point to which feed was captured and from where. Some operators add a session watermark or a subscriber identifier to the output, which can lead back to the account used.

Enforcement then works on the distribution points: the restream servers, the IPTV panels selling access and the sites embedding the player. The entry on pirate IPTV covers how those services are put together, and anti-piracy for TV broadcasters describes how a protection programme for a channel is usually organised.