A predefined advertising service identifier, or trigger code, is broadcast along with the digital media in a media distribution system, to give explicit insert triggers to re-distributors in a multi-tiered distribution system. These service identifiers are encrypted so that other parties without access to the triggers that are receiving the broadcast cannot identify ad insert time slots and therefore cannot insert ads without prior agreement. In one embodiment, the triggers are contained within pre-existing conditional access control word packets.