A conditional access system in which entitlement control messages (ECMs)
containing the encryption keys used to encrypt a program transmission,
are sent to a set-top box over a secure communications channel separate
from the channel used for transmission of the encrypted program.