Reduced size key allocation descriptors
First Claim
Patent Images
1. A method for key allocation in a broadcast encryption scheme, the method comprising:
- receiving a descriptor selected from a plurality of descriptors, the descriptor comprising a plurality of subset definitions and a plurality of pointers, wherein each subset definition defines a subset difference tree of a broadcast encryption scheme, and wherein each of the plurality of pointers identifies a location in a predetermined table,the predetermined table being shared among the plurality of descriptors,wherein a total size of the plurality of descriptors is reduced by substituting the plurality of pointers for variant data in the descriptors;
from each of the plurality of pointers, resolving a data segment in the predetermined table;
assembling the resolved data segments into a plurality of variant definitions; and
generating a media key block from the plurality of subset definitions and the plurality of variant definitions.
1 Assignment
0 Petitions
Accused Products
Abstract
Space-efficient methods of defining a key allocation scheme within a broadcast encryption system are provided. In some embodiments, a descriptor is received. The descriptor includes a plurality of subset definitions and a plurality of pointers. A data segment is resolved from each of the plurality of pointers. The resulting data segments are assembled into a plurality of variant definitions. A media key block is generated from the plurality of subset definitions and the plurality of variant definitions.
-
Citations
20 Claims
-
1. A method for key allocation in a broadcast encryption scheme, the method comprising:
-
receiving a descriptor selected from a plurality of descriptors, the descriptor comprising a plurality of subset definitions and a plurality of pointers, wherein each subset definition defines a subset difference tree of a broadcast encryption scheme, and wherein each of the plurality of pointers identifies a location in a predetermined table, the predetermined table being shared among the plurality of descriptors, wherein a total size of the plurality of descriptors is reduced by substituting the plurality of pointers for variant data in the descriptors; from each of the plurality of pointers, resolving a data segment in the predetermined table; assembling the resolved data segments into a plurality of variant definitions; and generating a media key block from the plurality of subset definitions and the plurality of variant definitions. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A computer program product for key allocation in a broadcast encryption scheme, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform a method comprising:
-
receiving a descriptor selected from a plurality of descriptors, the descriptor comprising a plurality of subset definitions, and a plurality of pointers, wherein each subset definition defines a subset difference tree of a broadcast encryption scheme, and wherein each of the plurality of pointers identifies a location in a predetermined table the predetermined table being shared among the plurality of descriptors, wherein a total size of the plurality of descriptors is reduced by substituting the plurality of pointers for variant data in the descriptors; from each of the plurality of pointers, resolving a data segment in the predetermined table; assembling the resolved data segments into a plurality of variant definitions; and generating a media key block from the plurality of subset definitions and the plurality of variant definitions. - View Dependent Claims (10, 11, 12, 13, 14, 15, 16)
-
-
17. A method comprising:
-
receiving a descriptor selected from a plurality of descriptors, the descriptor comprising;
(i) a plurality of row and column definitions and (ii) a plurality of pointers, wherein each pair of row and column definitions comprises data sufficient to define a sequence key block, and wherein each of the plurality of pointers identifies a location in a predetermined table,the predetermined table being shared among the plurality of descriptors, wherein a total size of the plurality of descriptors is reduced by substituting the plurality of pointers for variant data in the descriptors; from each of the plurality of pointers, resolving a data segment in the predetermine table; assembling the resolved data segments into a plurality of variant definitions; generating a sequence key block from the plurality of row and column definitions and the plurality of variant definitions. - View Dependent Claims (18, 19, 20)
-
Specification