Security Requirements for OCAP Applications

The majority of unbound OCAP applications, and particularly the Monitor Application and EPG, will need to be authenticated and provided with the correct Permission Request File upon transmission from an OCAP head end. This role can be performed by the OCAP Security File Generator (SFG).

OCAP SFG is an extension to the original MHP SFG product. OCAP SFG is fully compliant with the secuirty requirements of the OCAP Chapter 14, the OpenCable Security Specification and the OpenCable Common Download specification. SFG handles signing of downloads (including dual signatures) and inclusion of replacement certificates with the download image. This caters for new OCAP receiver images and the application authentication certificates as per the OpenCable Security Specification.

OCAP SFG will also support downloads of updated code images to DOCSIS modems.

Creation of PKCS7 files containing the download image and other appropriate content has also been added to this tool.