Patent ID: 8095785

Claim:
In a terminal of a conditional access system in which a user selects a service associated with a frequency, the terminal having a tuner and a secure element with at least one authorized entitlement unit number stored therein, a method of determining whether the terminal is authorized to receive the selected service having at least one component, the method comprising steps of: receiving at least one entitlement management message including an authorized multi-session key; receiving, over an out of band data link, at least one entitlement control message corresponding to the service, wherein each entitlement control message includes the at least one authorized entitlement unit number, a packet identifier (PID) and a payload, wherein the authorized multi-session key is changed infrequently and reveals encrypted control words for each of the at least one component, the encrypted control words changing frequently; authenticating each of the at least one entitlement control messages in the secure element, each authenticated entitlement control message revealing at least one first entitlement unit number associated with the selected service and at least one control word associated with the selected service, wherein the at least one first entitlement unit number and the at least one control word are carried in the payload; and determining that the terminal is authorized to receive the selected service when any first entitlement unit number of any authenticated entitlement control message corresponds to an authorized entitlement unit number, wherein the authorized entitlement unit number corresponds to a group of services that a receiver is authorized to receive.