Patent ID: 8693692

Claim:
A method comprising: receiving a service instance request from a digital subscriber communications terminal (DSCT), the service instance request comprising a unique chip identifier for the digital subscriber communications terminal, wherein the unique chip identifier is generated and hard-coded in the digital subscriber communications terminal on a one time programmable (OTP) memory before deploying the digital subscriber communications terminal to be used by a subscriber, wherein the OTP memory comprises a fuse, and wherein the fuse is configured to disable an output port of the DSCT based on receiving a command from at least one of: a manufacturer of the DSTC and a service provider; sending a request to a chip key server for a chip key associated with the unique chip identifier; receiving the chip key from the chip key server, wherein the chip key and the unique chip identifier are created for the DSCT at the time of manufacture, and are injected in the chip key server over a secured link; generating a service encryption key for the requested service instance; encrypting the requested service instance using the service encryption key; encrypting the service encryption key with the chip key; sending the encrypted service encryption key to the DSCT, wherein the service encryption key is changed every day, wherein sending the encrypted service encryption key comprises sending the encrypted service encryption key only to the DSCT authorized to receive the service instance, and wherein sending the encrypted service encryption comprises excluding an authorization bitmap and an entitlement control message (ECM); and transmitting the requested service instance encrypted with the service encryption key.