Patent ID: 8205243

Claim:
A conditional access system for transmitting encrypted data, the conditional access system comprising: an entitlement management message (EMM), provided to a set-top box, including a first entitlement and a second entitlement, the first entitlement corresponding to an encrypted program and the second entitlement corresponding to an enhanced service; and an entitlement control message (ECM), provided to the set-top box, including a key to decrypt the encrypted program providing a decrypted program, and an application identifier and an application control that are required to identify and control the enhanced service wherein the application identifier identifies the enhanced service, and wherein the application control comprises an application method for providing functions that the enhanced service performs, the provided functions comprising enabling and disabling each of the following: a return path, overlay graphics, and affect keyboard input, wherein access to the functions is restricted based on a determined application class, wherein the application class comprises at least one of the following: a natively registered application, a securely downloaded application, and a rogue application, wherein the access to the functions being restricted based on the determined application class comprises the rogue application only being allowed access to a safe profile of system functions, and wherein the application method further providing a link to the associated application's source code.