Patent ID: 9253544
Filing Date: 2016-02-02
CPC Classification: H04N

Claim Text:
1. A content distribution network, comprising: a plurality of playback devices connected to a headend via a network, where the headend includes at least one content protection system; a clone monitor comprising a server comprising a processor and a memory containing a clone monitor server application wherein the clone monitor server application configures the processor to register playback devices based upon a unique identifier supplied by each playback device, when communicating with the at least one content protection system; wherein the clone monitor is configured to: intercept messages between the plurality of playback devices and the headend; store content found within the intercepted messages associated with each playback in the memory, where the content found within the intercepted messages includes at least one request for a cryptographic key; aggregate the stored content of messages associated with each playback device over time; analyze the aggregated content of messages for at least one pattern of abnormal behavior related to a specific unique identifier supplied by the plurality of playback devices; and identify at least one clone playback device based upon the at least one pattern of abnormal behavior, wherein the at least one pattern of abnormal behavior includes number of cryptographic keys issued to the specific unique identifier exceeding a predetermined number.