1. A fuel filtration system comprising:
a pump configured to receive fuel from a fuel storage tank;
at least one filter positioned downstream of the fuel storage tank and fluidly coupled to the pump; and
a recirculation loop provided across the pump and the at least one filter, the recirculation loop configured to:
recirculate at least a portion of the fuel through the at least one filter; and
provide a remaining portion of the fuel to an engine during the recirculation, wherein the remaining portion of the fuel is determined based on a fuel consumption of the engine.
2. The fuel filtration system of claim 1, wherein the at least one filter is fluidly coupled to a suction side of the pump.
3. The fuel filtration system of claim 1, wherein the at least one filter is fluidly coupled to a pressure side of the pump.
4. The fuel filtration system of claim 1 further comprising a check valve provided in the recirculation loop.
5. The fuel filtration system of claim 1 further comprising a check valve provided across the pump.
6. The fuel filtration system of claim 1, wherein the pump includes any one of a fixed displacement pump and a variable displacement pump.
7. The fuel filtration system of claim 1 further comprising a high pressure pump provided downstream of the filtration system, wherein the remaining portion of the fuel is provided to the engine through the high pressure pump.
8. The fuel filtration system of claim 1 further comprising a fuel transfer pump in fluid communication with the filtration system.
9. The fuel filtration system of claim 1 further comprising one or more additional filters provided downstream of the filtration system.
10. A method comprising:
receiving a flow of fuel directed towards a pump from a fuel storage tank;
circulating the flow of fuel through at least one filter fluidly coupled to the pump;
recirculating at least a portion of the flow of fuel through the at least one filter; and
providing a remaining portion of the flow of fuel to an engine during the recirculation, wherein the remaining portion of the fuel is determined based on a fuel consumption of the engine.
11. The method of claim 10 further comprising receiving the flow of fuel through the pump, wherein the pump is positioned upstream of the filter.
12. The method of claim 10 further comprising drawing the flow of fuel through the filter, wherein the filter is positioned upstream of the pump.
13. A machine comprising:
an engine;
a high pressure pump fluidly coupled to the engine;
a fuel storage tank; and
a fuel filtration system fluidly coupled to the fuel storage tank, the fuel filtration system comprising:
a pump configured to receive fuel from the fuel storage tank;
at least one filter positioned downstream of the fuel storage tank and fluidly coupled to the pump; and
a recirculation loop provided across the pump and the at least one filter, the recirculation loop configured to:
recirculate at least a portion of the fuel through the at least one filter; and
provide a remaining portion of the fuel to the engine through the high pressure pump during the recirculation,
wherein the remaining portion of the fuel is determined based on a fuel consumption of the engine.
14. The machine of claim 13, wherein the at least one filter is fluidly coupled to a suction side of the pump.
15. The machine of claim 13, wherein the at least one filter is fluidly coupled to a pressure side of the pump.
16. The machine of claim 13 further comprising a check valve provided in the recirculation loop.
17. The machine of claim 13 further comprising a check valve provided across the pump.
18. The machine of claim 13, wherein the pump includes any one of a fixed displacement pump and a variable displacement pump.
19. The machine of claim 13 further comprising a fuel transfer pump in fluid communication with the filtration system.
20. The machine of claim 13 further comprising one or more additional filters downstream of the filtration system.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. Network apparatus disposed at a first location of a content delivery network and adapted for delivery of security information to a second location of said network, comprising:
a content provisioning apparatus;
a conditional access apparatus in communication with said provisioning apparatus; and
an authentication apparatus in communication with at least said conditional access apparatus;
wherein at least said authentication and conditional access apparatus are configured to cooperate to transmit to said second location both: (i) at least one cryptographic key, and (ii) encrypted code modules, which are configured to when executed by a secure processor at said second location, provide at least protection of said content at a secure element disposed at said second location, said encrypted code comprising at least two portions, a first portion being common to a plurality of second locations, and a second portion being unique to said second location.
2. The network apparatus of claim 1, wherein said first location comprises a cable system head-end, and said second location comprises a residence or business enterprise.
3. The network apparatus of claim 2, wherein said apparatus is configured to deliver said at least one key and encrypted code via a DOCSIS-compliant cable modem.
4. The network apparatus of claim 2, wherein said apparatus is configured to deliver said at least one key and encrypted code via an in-band downstream QAM.
5. The network apparatus of claim 1, wherein said first location comprises a hub within a broadcast switched architecture (BSA) network.
6. The network apparatus of claim 1, further comprising a personalization server (PS) apparatus in communication with said conditional access system, said PS being adapted to select said at least one cryptographic key and encrypted code based at least in part on a communication received from a client device disposed at said second location and comprising said secure element.
7. The network apparatus of claim 6, further comprising an interface to a trusted authority (TA), said TA providing said at least one cryptographic key to said PS based at least in part on information contained in said communication from said client device to said network apparatus.
8. The network apparatus of claim 7, further comprising a trusted authority proxy (TAP), said TAP in at least periodic communication with a remote trusted authority (TA), said TAP providing said at least one cryptographic key to said PS based at least in part on information contained in said communication from said client device to said network apparatus, and independent of communication with said TA.
9. The network apparatus of claim 6, wherein said authentication apparatus comprises software configured to authenticate said secure element based at least in part on said communication received from said secure element, said authentication comprising a condition precedent for downloading of said at least one key and encrypted code.
10. The network apparatus of claim 1, wherein said encrypted code comprises a secure client adapted to run on said secure element of said client device.
11. The network apparatus of claim 10, wherein said network apparatus is further configured to transmit a bootloader program to run on said secure element to enable at least a portion of said transmitting of said cryptographic key and encrypted code.
12. The network apparatus of claim 10, wherein said network apparatus is further configured to transmit second code to said client device, said second code comprising a conditional access (CA) client, said CA client adapted to run on said secure element to enforce at least one CA policy.
13. A method of delivering security information from a network apparatus disposed at a first location of a content delivery network to a second location of said network, comprising:
providing content to an entity at said second location from a content delivery element of said network apparatus;
transmitting at least one cryptographic key to said entity via a cooperation of an authentication apparatus and a conditional access apparatus of said network apparatus; and
transmitting one or more encrypted code modules to said entity via a cooperation of said authentication apparatus and said conditional access apparatus of said network apparatus, said one or more encrypted code modules configured to, when executed by a secure processor of said entity, provide at least protection of said content at a secure element disposed at said entity;
wherein said encrypted code modules each comprise at least two portions, a first portion being common to a plurality of second locations, and a second portion being unique to said second location.
14. The method of claim 13, wherein said act of providing content to said entity at said second location comprises providing said content to a client device disposed thereat and comprising said secure processor and said secure element.
15. The method of claim 14, further comprising:
receiving at said network apparatus a communication from a client device; and
based at least in part on said communication, selecting said at least one cryptographic key and said one or more encrypted code modules via a personalization server (PS) apparatus in communication with said conditional access apparatus of said network apparatus.
16. The method of claim 15, further comprising receiving from a trusted authority (TA) said at least one cryptographic key, said at least one cryptographic key being received at said PS based at least in part on information contained in said communication from said client device.
17. The method of claim 16, further comprising receiving from a trusted authority proxy (TAP) in at least periodic communication with a remote trusted authority (TA), said at least one cryptographic key, said at least one cryptographic key being received at said PS based at least in part on information contained in said communication from said client device, and independent of communication with said TA.
18. The method of claim 15, further comprising using said authentication apparatus to authenticate said secure element based at least in part on said communication received from said client device, said authentication comprising a condition precedent for downloading of said at least one cryptographic key and said encrypted code modules.
19. The method of claim 13, wherein said act of transmitting said one or more encrypted code modules to said entity comprises transmitting a secure client configured to run on said secure element of said client device.
20. The method of claim 19, further comprising transmitting a bootloader program from said network apparatus to said client device, said boatloader program configured to run on said secure element to enable at least a portion of said transmission of said cryptographic key and encrypted code modules.
21. The method of claim 19, further comprising transmitting a second code to said client device, said second code comprising a conditional access (CA) client, said CA client adapted to run on said secure element to enforce at least one CA policy.
22. A computer readable apparatus comprising a non-transitory medium configured to store a computer program thereon, said computer program, when executed, configured to:
receive at a network apparatus a communication from a client device, said client device comprising at least a secure processor and a secure element;
authenticate said secure element based at least in part on said communication; and
conditional on said secure element being authenticated:
deliver content to said client device;
select at least one cryptographic key based at least in part on information in said communication;
transmit said at least one cryptographic key to said client device;
select one or more encrypted code modules based at least in part on information in said communication; and
transmit said one or more encrypted code modules to said client device;
wherein said one or more encrypted code modules are configured to, when executed by said secure processor of said client device, provide at least protection of said content at said secure element; and
wherein said encrypted code modules each comprise at least two portions, a first portion being common to a plurality of second locations, and a second portion being unique to said second location.
23. The computer readable apparatus of claim 22, wherein said network apparatus comprises a headend entity of a content delivery network, and said client device is located at a residence or business enterprise within said content delivery network.
24. The computer readable apparatus of claim 22, wherein said network apparatus is configured to transmit said at least one cryptographic key and said one or more encrypted code modules via a DOCSIS-compliant cable modem.
25. The computer readable apparatus of claim 22, wherein said network apparatus is configured to transmit said at least one cryptographic key and said one or more encrypted code modules via an in-band downstream QAM.
26. The computer readable apparatus of claim 22, wherein said network apparatus comprises a hub entity within a broadcast switched architecture (BSA) network.