background image

Features 

User Manual for AZ110 Broadcast Satellite Modulator with ASI interface 

 

 
 

version 3.2 
 

 

 

 
 

93

 

 

SHAPING THE FUTURE SATELLITE OF COMMUNICATIONS 

 

8.3.4 

Generating Encrypted Content Keys 

 

Newtec distributes a simple web-based java script to compute 
encrypted keys for a specific device.  
Use the Newtec Service Desk tool to receive a copy:  

> Browse to

 

http://customersupport.newtec.eu

 

> Fill in your Username and Password 
> Create a ticket 

As response of your request you will receive the script from our 
support team. 

In case you don't have a Username and Password yet for the 
Newtec Service Desk tool: request a login to 

customersupport@newtec.eu

 

 

 

In the section below, all keys or data are represented in 
hexadecimal. For the algorithms, they are represented with the 
most significant byte (bit) first. 

8.3.4.1 

128-bit Keys 

The computation of the encrypted content key from a given content key is depicted 
in the following figure. 

AES

Encryp

Encrypted

Content Key

Group Key

Content Key

128 bits

128 bits

128

bits

Key

Data in

Data out

 

Figure 51 - Process to Encrypt a Content Key with a Specific Group Key in 128 bit Mode 

The following lines provide a few examples of key computations for reference: 

Example 1

Content Key:  

 

e81816b87e5cf9c4e81816b87e5cf9c4 

Summary of Contents for AZ110

Page 1: ...User Manual for AZ110 Broadcast Satellite Modulator with ASI interface version 3 2 SHAPING THE FUTURE OF SATELLITE COMMUNICATIONS...

Page 2: ...use only by parties authorised by Newtec All Rights Reserved No part of this document may be photocopied reproduced stored in a retrieval system or transmitted in any form or by any means whether ele...

Page 3: ...ERN EC DECLARATION OF CONFORMITY We Newtec Cy N V declare that our product AZ110 with type identifiers NTC2277 NTC2280 to which this declaration relates is in conformity with the essential requirement...

Page 4: ...TURE SATELLITE OF COMMUNICATIONS TO WHOM IT MAY CONCERN Restriction of Hazardous Substances Directive RoHS Directive 2002 95 EC The undersigned hereby confirms the following statement We hereby declar...

Page 5: ...bligations under REACH as a manufacturer of articles and as a downstream user of chemicals products In order to comply with the REACH regulation Newtec Cy N V has put into place processes and procedur...

Page 6: ...g to qualified personnel To prevent electrical shock do not remove covers To use the equipment correctly and safely it is essential that both operating and servicing personnel follow generally accepte...

Page 7: ...otective earthing and to a cable distribution system using coaxial cable may in some circumstances create a fire hazard Connection to a cable distribution system has therefore to be provided through a...

Page 8: ...Radiation safety of laser products This product is a Class 1 laser product in accordance with FDA 21CFR Ch 1 1040 1998 US department of Health and Human Service Code of Federal Regulations Instruction...

Page 9: ...esigned to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and radiates radio frequency energy If no...

Page 10: ...vironment in which the unit is exposed to Unpressurised altitudes higher than 2 000 metres Extreme temperatures outside the stated operating range Operating temperature range 0 to 40 C Excessive dust...

Page 11: ...anty stated above such as without limitation fuses or lamps Any defect due to normal wear and tear or caused by transportation or Force Majeure events or attributable to the Customer s improper use ne...

Page 12: ...ge indicates a hazardous situation that if not avoided may result in minor or moderate injury It may also refer to a procedure or practice that if not correctly followed could result in equipment dama...

Page 13: ...r monitored on the AZ110 There are separate reference manuals for the AZ110 with ASI interface and for the AZ110 with ASI and Gigabit Ethernet interface DualFlow Interface Equalink User Manual this ma...

Page 14: ...tical ASI AG 02 Output Interface L band 950 1750 MHz Default IF 50 180 MHz AA 02 L band 10MHz for BUC AA 03 L band 10MHz 24Vdc for BUC AA 12 L band 10MHz 48Vdc for BUC AA 13 Extended L band 950 2150 M...

Page 15: ...8PSK 16QAM 16APSK 30Mbaud AB 11 DVB S S2 Q 8PSK 16QAM 16APSK 45Mbaud AB 12 DVB S S2 Q 8PSK 16QAM 16 32APSK 5Mbaud AB 13 DVB S S2 Q 8PSK 16QAM 16 32APSK 15Mbaud AB 14 DVB S S2 Q 8PSK 16QAM 16 32APSK 3...

Page 16: ...F COMMUNICATIONS Feedback Newtec encourages your comments concerning this document We are committed to providing documentation that meets your needs Please send any comments by contacting us at docume...

Page 17: ...le Distribution System 22 2 4 Technical Earthing 22 3 Physical Description 23 3 1 Front Panel Description 23 3 2 Back Panel Description 24 3 2 1 Power Supply Unit M C and External 10 0 MHz Input 24 3...

Page 18: ...Central Stage Window 50 6 3 3 Alarm Window 55 6 3 4 Function Control Window 56 6 3 5 Status Bar 60 6 4 Configuring the Device via the GUI 61 6 4 1 Introduction 61 6 4 2 Parameters in the GUI 62 6 4 3...

Page 19: ...of Operation 82 8 3 AES Content Protection 84 8 3 1 Content Protection 85 8 3 2 Key Management 85 8 3 3 Operation of AES 90 8 3 4 Generating Encrypted Content Keys 93 8 4 ASI Test Generator 96 8 5 Equ...

Page 20: ...Z110 is also available with DualFlow Refer to the User Manual for AZ110 Broadcast Satellite Modulator with Dualflow Option for more information To protect the satellite transmission the BISS BISSM or...

Page 21: ...tream interfaces L band monitoring output Programmable amplitude slope equalizer Optional extended L band 950 2150 MHz Optional Baseband frame input support Optional switchable BUC power supply on L b...

Page 22: ...to Figure 1 Fixing the device with four front panel screws only will damage it and could result in injury Figure 1 Mounting with L Profiles It is allowed to operate the equipment in transportable inst...

Page 23: ...equipment and can easily be accessed or that there are other suitable means to disconnect from the mains supply The power supply is set to operate from 100 to 240Vac to 47 63Hz 2 3 Cable Distribution...

Page 24: ...configured controlled and monitored using the front panel The front panel consists out of the following parts Display The display consists of a 2 x 40 characters LCD screen The top row indicates the...

Page 25: ...more detail Figure 6 AZ110 with ASI Interface Back Panel Connections 3 2 1 Power Supply Unit M C and External 10 0 MHz Input ALARM 10 100Base T Ref In M C RS232 485 100 260 VAC LINE Figure 7 Power Su...

Page 26: ...nterface via the front panel or via the GUI but not via the serial port itself RS485 RS232 Pin Name Function Pin Name Function 1 GND Shield ground 1 GND Shield ground 2 Not connected 2 Rx D Receive Da...

Page 27: ...chassis ground The common general alarm is active when the device is not working properly For example when the power supply fails The common input alarm is active when the device does not receive an...

Page 28: ...can send RMCP Remote Monitoring and Control Protocol commands to the device using the Ethernet interface The commands are sent as data in a TCP IP stream The used socket number is 5933 The RMCP protoc...

Page 29: ...3 2 3 The connector REF OUT is used for option GR01 or GR02 When one of these options is selected the REF OUT connector is available on the first sub back panel that enables this option In all other...

Page 30: ...r Technical Specifications Signalling Type 1 EXT L IN Not used 2 MON OUT SMA Female 50 Ohm L band 1080MHz 3 MOD OUT BNC Female 50 Ohm L band 4 REF OUT SMA Female 50 Ohm 10MHz Back Panel 03 Description...

Page 31: ...24V 48V The following DC voltages can be selected 12V 24V 48V The maximum current on this connector is 3A Use a coax cable rated for the voltage and current marked on the device Switch of the power o...

Page 32: ...05 Description Connector Technical Specifications Signalling Type 1 IFL IN SMA Female 50 Ohm L band Input to be looped to Mod OUT of BP01 2 IFL OUT SMA Female 50 Ohm L band 10MHz Back Panel 06 Descrip...

Page 33: ...8 Description Connector Technical Specifications Signalling Type 1 IF In Not used 2 IF Out SMA Female 50 Ohm L band 3 IFL Out Not used 4 IFL In Not used Back Panel 07 Description Connector Technical S...

Page 34: ...3 2 2 for the description of the different sub back panels Option Back Panel Combination Connectors Not Used BP number connector connector Default BP 01 BP 01 3 4 AG 02 BP 01 AA 01 BP 01 BP 02 BP 01 3...

Page 35: ...NS Option Back Panel Combination Connectors Not Used BP number connector connector AA 10 BP 01 BP 02 BP 07 BP 01 3 4 BP 02 1 3 4 AA 11 BP 01 BP 02 BP 07 BP 01 3 4 BP 02 1 3 4 AA 18 BP 01 BP 02 BP 01 3...

Page 36: ...APING THE FUTURE SATELLITE OF COMMUNICATIONS 4 BLOCK DIAGRAM This block diagram refers to the default configuration L band 4 1 Introduction In this diagram the modem is split up into the following fun...

Page 37: ...ed to scramble a single stream or multiple program streams BISSM The ASI input is bundled into a TS Transport Stream The modulated L band signal is then forwarded to a multiplexer in this multiplexer...

Page 38: ...are used to perform the communication between the management PC and the device Remote Monitoring and Control Protocol For more information refer to section 5 5 1 Simple Network Management Protocol For...

Page 39: ...Z110 Broadcast Satellite Modulator with ASI interface Unit Setup Serial port settings Ethernet settings Display settings SNMP settings Web interface Control AES Monitor Architecture Diagnostics Modula...

Page 40: ...16 front panel keys you can navigate in the menus and change parameters Press to open a pop up help screen with more information on the selected item Press ESC to exit this help screen Press and to hi...

Page 41: ...l screensaver is useful to identify a number of units if you have more than one unit Activate the screensaver in the following menu AZ110 Unit Setup Display settings Enter the screensaver delay Enter...

Page 42: ...EDs The LEDs provide a basic status of the device Figure 14 Front Panel LEDs Data In green At least 1 data input is active and valid Data Process green Data processed prior to transmission rate adapta...

Page 43: ...Unit Setup Serial port settings Select RS232 as serial interface type Default serial port settings Serial interface type RS485 Device RMCP address 100 Serial baud rate 115200 Alternatively use an RS23...

Page 44: ...9200 38400 57600 or 115200 baud To set the serial baud rate choose AZ110 Unit Setup Serial port settings There is no flow control on the serial interface Apart from correctly formatted messages the on...

Page 45: ...aphical user interface GUI that allows you to remotely monitor and control your equipment through a web browser To use the web interface adapt the TCP IP properties of the computer and manually set an...

Page 46: ...ence Manual of the device The RMCP general manual v1 6 explains how Newtec devices can be remotely monitored and controlled via the serial port or via Ethernet This manual is delivered on CD ROM toget...

Page 47: ...knowledge message Only in a few restricted cases does the device not respond to a request from the control unit This is for example the case when a general device reset is requested Correctly received...

Page 48: ...for displays with a screen resolution of 1024 x 768 or higher 6 2 Opening the GUI Proceed as follows to open the GUI on your computer 1 Open a web browser on your computer Newtec advises to use Firefo...

Page 49: ...st The user has read only access to the typical configuration and monitoring options Normal The user has read write access to the typical configuration options The user can load a configuration but ca...

Page 50: ...E OF COMMUNICATIONS 6 3 Main Windows of the GUI When the GUI application opens five areas are visible Figure 17 GUI The table below gives an overview of the areas of the GUI see Figure 17 Area No Area...

Page 51: ...content The text displayed in the editable text field of the banner is the same as the screensaver message 6 3 2 Central Stage Window The central stage window contains by default three tabs Overview...

Page 52: ...e colour red yellow green or grey based on the current condition The following conditions can occur Error The block and or arrow has a red colour There is an alarm at least one counter indicates an er...

Page 53: ...ree structure in the previous user interface version for this device The tree structure contains different types of icons Figure 20 Tree Navigation Icons The following table describes the properties o...

Page 54: ...buttons in the navigation bar above the tree Figure 21 Tree Navigation Bar The following table describes the function of each button in the tree navigation bar Refer to Figure 21 Button No Button fun...

Page 55: ...with ASI interface version 3 2 54 SHAPING THE FUTURE SATELLITE OF COMMUNICATIONS 6 3 2 3 Trending Graphs Tab This tab shows an overview of different graphs that can be used to monitor the device The f...

Page 56: ...3 3 Alarm Window The alarm window shows the alarms generated by the device By default only active or memorized alarms that have not been masked by the user are visible Alarms are sorted first by thei...

Page 57: ...n alarm was generated since it was last cleared 3 This area contains drop down list boxes in which you can select a filter to apply You can filter on the alarm activity Active Memorized alarms Masked...

Page 58: ...2 57 SHAPING THE FUTURE SATELLITE OF COMMUNICATIONS 6 3 4 1 Miscellaneous Tab Figure 25 Miscellaneous Tab The miscellaneous tab Misc contains seven buttons that allow to perform tasks consult informat...

Page 59: ...empty but the management parameters are kept e g IP address This can only be performed by expert user profiles Refer to section6 4 4 Firmware upgrade Clicking this button allows to browse to a zip fi...

Page 60: ...d a stored configuration The Import and Export buttons below the list of different configurations support to Import configurations from a cfg file from the local PC Refer to paragraph 6 4 7 Export all...

Page 61: ...ck the arrow next to the button to open the Edit option An overview of all allowed RMCP commands can be found in the reference manual of your device 6 3 5 Status Bar The status bar informs on Ongoing...

Page 62: ...the overview tab Non commonly used parameters can be set on the parameter pages of the tree structure Experienced users of the device can set all parameters using the tree structure parameter pages A...

Page 63: ...GUI 6 4 2 1 Parameter Interface Types The GUI contains different types of parameter dialog boxes to set up all parameters of a configuration Dialog box type Example Drop down list box Data field Chec...

Page 64: ...und 6 4 2 2 Applicable Parameters The number of parameters you see in the tree view and the detailed view of a block depends on your user profile and the current device configuration Parameter changes...

Page 65: ...uration reset to clear the existing configuration before using the Wizard Experienced users can adjust parameters in the tree tab Proceed as follows to adjust parameters 1 Click the Overview tab or th...

Page 66: ...dulator with ASI interface version 3 2 65 SHAPING THE FUTURE SATELLITE OF COMMUNICATIONS Figure 28 Initializing Broadcast Setup Wizard Figure 29 Welcome Complete the different steps of the wizard acco...

Page 67: ...e software Hard Resets the software and the hardware Perform a hardware reset after upgrading the capablities of your device Config Clears the configuration of the device The flash memory is empty but...

Page 68: ...stage window press the icon in the right upper corner of the tab Figure 31 Users List Tab Four GUI user accounts with different access rights can be created At least one user account with expert user...

Page 69: ...allowed to duplicate user names Password this is the password the user must use to log in 4 Select the desired Profile from the drop down list box Guest the user has read only access to the typical c...

Page 70: ...r account 1 Click the Users List button on the Miscellaneous tab 2 Select the user account you want to remove from the list 3 Type in the Password field the password for the user account 4 Click the D...

Page 71: ...the user account for which you want to change the user profile 3 Type in the Password field the password for the user account 4 Select a user profile from the Profile drop down list box Click the Save...

Page 72: ...ec device You can load any of the 48 configurations to view or test them 5 The user has two options The user can keep the imported configurations In this case the user must save the current imported c...

Page 73: ...MUNICATIONS Click Basic report or Full report Figure 35 Diagnostic Report Generation Figure 36 Diagnostic Report Ready Click download to store the diagnostics report as an html file or click here to o...

Page 74: ...ier in the header of the packet Generic data can also be carried in MPEG transport streams provided that it is first encapsulated in the transport stream packets The most common way to encapsulate IP...

Page 75: ...Sharper roll off factors A new framing structure called baseband frames The ability to vary the modulation parameters dynamically This is used in modes called Variable Coding and Modulation and Adapti...

Page 76: ...rame is identified with an Input Stream Identifier A sequence of DVB S2 baseband frames with the same ISI number is called a DVB S2 stream A satellite carrier that transports several DVB S2 streams is...

Page 77: ...eiving station and the higher possible signal fading to ensure adequate signal availability in all receiving stations HUB HUB QPSK 4 5 DVB S2 Figure 41 CCM VCM Variable Coding and Modulation is a mode...

Page 78: ...e modulator which modulation parameters to use for each baseband frame ACM allows operating satellite links with almost no margin since the system adapts automatically to fading or interference condit...

Page 79: ...on When a noticable amount of phase noise is present At low data rates When distortion is present on the signal for example due to non linearity When using one of the following ModCods this is due to...

Page 80: ...stream modulation In DVB S mode the transport stream packets are directly modulated towards the satellite link In DVB S2 mode the transport stream packets are packed into DVB S2 baseband frames before...

Page 81: ...a fixed transmit symbol clock even if the net input transport rate is variable It is necessary to explicitly allow for null packet dropping The rate adapter will also adjust MPEG PCR time stamps as re...

Page 82: ...ed for DSNG BISS specification Mode E BISS with Encrypted keys referred to as BISS E introduces an additional mechanism to accept the insertion of Encrypted Session Words ESWs while at the same time c...

Page 83: ...damental to such systems and is achievable by encrypting them 8 2 3 Modes of Operation The Newtec Scrambler supports the following three modes of operation Mode 0 No scrambling Mode 1 All components a...

Page 84: ...is compliant with BISS Mode 1 It supports the insertion of a 12 character clear session word through the front panel and through a remote control interface RMCP or SNMP The clear sesson word entered...

Page 85: ...to receive the content when the correct content key is loaded on the demodulator Furthermore AES content protection is a fully transparent security solution that guarantees the transport stream at the...

Page 86: ...Unencrypted streams can be received by any DVB S2 compliant receiver Encrypted signals can only be received by devices that have the Newtec AES decryption mechanism implemented 8 3 2 Key Management 8...

Page 87: ...that the encrypted content key can only be used on that device or devices with the same group key Each device can support two keys for each stream the odd key or the even key One key is the active key...

Page 88: ...device Encrypted content keys cannot be read back on any interface Content key There are two content keys per stream the odd content key and the even content key The content keys are entered by the us...

Page 89: ...nd 64 bits for meeting exportation restrictions in some countries the 64 bit keys have a randomness of 56 bits to fully meet exportation restrictions The last byte of the key is not used It is possibl...

Page 90: ...Weak DES keys are listed in Appendix E at the back of this manual 8 3 2 5 Seamless Key Change The AES key management system is designed to allow the change of an encryption key during a transmission...

Page 91: ...e decryptor encryption mode is set to On 3 The odd content key is entered in the encryptor 4 The encryptor encryption mode is set to On 8 3 3 2 Changing Keys Seamlessly Starting point The encryptor se...

Page 92: ...new content key is entered in all decryptors except the one receiver to be removed from the network 3 The new content key is entered in the encryptor 4 The encryptor is switched to the even key 8 3 3...

Page 93: ...happen that the group of receivers shall differ for each stream But as one receiver can receive several streams groups must be defined per stream In this case two options are possible Send the encryp...

Page 94: ...don t have a Username and Password yet for the Newtec Service Desk tool request a login to customersupport newtec eu In the section below all keys or data are represented in hexadecimal For the algori...

Page 95: ...b08 Encrypted Content Key 9df1586017ee2b0417eebf86ac6d4627 8 3 4 2 64 bit Keys A similar process is used for the computation of encrypted content keys in the 64 bit mode The computation of the encrypt...

Page 96: ...SHAPING THE FUTURE SATELLITE OF COMMUNICATIONS Encrypted Content Key bf561dd5e15890b7 Example 2 Content Key 1234567890abcdef Group Key fb5f9c585dd359aa Encrypted Content Key d46f63e2cc998eec Example 3...

Page 97: ...and dector The test generator generates a signal on the ASI A in interface This is very useful to test the proper functioning of the setup It can also be used to test the quality of the transmission...

Page 98: ...nctions which can be individually enabled disabled Equalink operating principle Optimum predistortion is computed off line based on specified distortion characteristics Resulting predistortion table s...

Page 99: ...dcast Satellite Modulator with ASI interface version 3 2 98 SHAPING THE FUTURE SATELLITE OF COMMUNICATIONS APPENDIX A SETUP WIZARD Click Misc Wizards The following screens are displayed Figure 54 Init...

Page 100: ...ard User Manual for AZ110 Broadcast Satellite Modulator with ASI interface version 3 2 99 SHAPING THE FUTURE SATELLITE OF COMMUNICATIONS Click Next Figure 56 Interface Parameters Click Next Figure 57...

Page 101: ...Appendix A Setup Wizard User Manual for AZ110 Broadcast Satellite Modulator with ASI interface version 3 2 100 SHAPING THE FUTURE SATELLITE OF COMMUNICATIONS Click Next Figure 58 Finish...

Page 102: ...operate the modulator without having to go through all the different menus A typical example would be to group the parameters output frequency output level and transmit while leaving all other parame...

Page 103: ...188 or 204 byte mode Encryption optional BISS single program mode 0 1 E up to 54 Mbit s BISSM multiple program mode 0 1 E up to 100 Mbit s Rate adapter Modulation Supported modulation schemes and FEC...

Page 104: ...equency 950 1750 MHz 50 Hz steps Spurious better than 65 dBc 4 kHz 5 dBm level and 256 kbaud Extended L band output optional Connector SMA F 50 ohms Return loss 14 dB Level 35 5 dBm 2dB Frequency 950...

Page 105: ...ies 17 30 18 10 GHz 17 60 18 40 GHz Level 25 3 dBm 3dB L band monitoring output default Connector SMA F 50 ohms Return loss 7 dB Level 45 dBm Frequency default identical to L band output with options...

Page 106: ...ppb 10 year Generic Monitor and control interfaces Web based GUI Diagnostics report alarm log RMCP over TCP IP UDP and RS232 RS485 SNMP v2c Alarm interface Electrical dual contact closure alarm conta...

Page 107: ...n GR 01 High Stability 10MHz reference In Out Stability 5x10exp 8 over 0 C to 70 C Warm up time 5 min 100 ppb Ageing 15 ppb day 300ppb year Phase noise dBc Hz 10Hz 100 50kHz 140 Specifications of opti...

Page 108: ...00 1e00e0fe0e00f0fe 1e00fee00e00fef0 1e1e00000e0e0000 1e1e1e1e0e0e0e0e 1e1ee0e00e0ef0f0 1e1efefe0e0efefe 1ee000fe0ef000fe 1ee01ee00ef00ef0 1ee0e01e0ef0f00e 1ee0fe000ef0fe00 1efe00e00efe00f0 1efe1efe0e...

Page 109: ...Counter BER Bit Error Rate Ratio BISS Basic Interoperable Scrambling System BNC Bayonet Neill Concelman Connector for coaxial cable BUC Block Up Converter CCM Constant Coding and Modulation CTS Clear...

Page 110: ...LCD Liquid Crystal Display LED Light Emitting Diode LDPC Low density Parity check code LO Local Oscillator LSB Least Significant Bit in digital coding LVDS Low Voltage Digital Signalling M C Monitori...

Page 111: ...azardous Substances RS Reed Solomon RTP Real time Transmission Protocol SNMP Simple Network Management Protocol SPI Synchronous Parallel Interface SW Software TCP Transmission Control Protocol TS Tran...

Reviews: