Method and system for providing bus encryption based on cryptographic key exchange

• US 20020141577A1
• Filed: 03/29/2001
• Published: 10/03/2002
• Est. Priority Date: 03/29/2001
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Ripley, Michael S., Traw, Brendan S.
• Application Number:
  US09/823,423
• Publication Number:
  US 20020141577A1
• Time in Patent Office: Days
• US Class Current: 380/201
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00362 the key being obtained from a media key block [MKB]
• CPC Class Codes: G11B 20/00449 content scrambling system [CSS]
• CPC Class Codes: G11B 20/00543 wherein external data is encrypted, e.g. for secure communication with an external device or for encrypting content on a separate record carrier
• CPC Class Codes: G11B 20/00855 involving a step of exchanging information with a remote server
• CPC Class Codes: H04N 21/4135 external recorder interface circuits between an apparatus for recording television signals and a television receiver H04N5/775
• CPC Class Codes: H04N 21/4325 by playing back content from the storage medium reproduction of recorded television signals H04N5/76; reproduction of recorded television signals H04N9/79
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 5/765 Interface circuits between an apparatus for recording and another apparatus
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A system is described for protecting digital content stored on a storage medium from unauthorized copying. The system includes a number generator to generate a nonce, an encryption subsystem and a decryption subsystem. The encryption subsystem encrypts data accessed from a storage medium containing a key distribution data block using an encryption bus key prior to transmitting the encrypted data via a data bus. The encryption bus key is derived based on at least a portion of the key distribution data block, at least one device key assigned to the encryption subsystem and the nonce generated by the number generator. The decryption subsystem is coupled to the data bus to decrypt the encrypted data received over the data bus using a decryption bus key derived based on at least a portion of the key distribution data block, at least one device key assigned to the decryption subsystem and the nonce generated by the number generator.

Claims

1. A system comprising:

a number generator to generate a nonce; and

an encryption subsystem to encrypt data accessed from a storage medium containing a key distribution data block using an encryption bus key prior to transmitting the encrypted data via a data bus, wherein said encryption bus key is derived based on at least a portion of the key distribution data block, at least one device key assigned to said encryption subsystem and the nonce generated by the number generator.

2. The system of claim 1, further comprising a decryption subsystem coupled to said data bus to decrypt said encrypted data received over the data bus using a decryption bus key derived based on at least a portion of the key distribution data block, at least one device key assigned to said decryption subsystem and the nonce generated by the number generator.

3. The system of claim 1, wherein said encryption subsystem comprises:

a processing logic to process at least a portion of the key distribution data block read from the storage medium using the at least one device key assigned to said encryption subsystem to compute a media key;

a one-way function to generate the encryption bus key based on the media key and the nonce generated by the number generator; and

an encryption logic to encrypt data accessed from said storage medium using said encryption bus key.

4. The system of claim 2, wherein said decryption subsystem comprises:

a processing logic to process at least a portion of the key distribution data block read from the storage medium using the at least one device key assigned to said decryption subsystem to compute a media key;

a one-way function to generate the decryption bus key based on said media key and the nonce generated by the number generator; and

a decryption logic to decrypt data transmitted over the data bus by using said decryption bus key.

5. The system of claim 1, wherein said data transmitted over the data bus is encrypted using the bus key derived based on the nonce generated by the number generator such that if said data is recorded at the time of transmission, said recorded data is not subsequently playable by a decryption subsystem that does not have access to the same nonce used by said encryption subsystem to encrypted said data transmitted over the data bus.

6. The system of claim 2, wherein said key distribution data block is embodied in the form of a media key block comprising a block of encrypted data.

7. The system of claim 2, wherein said encryption subsystem is implemented in a storage device capable of accessing data from a storage medium and said decryption subsystem is implemented in a host device capable of retrieving data from said storage device.

8. The system of claim 2, wherein said media key computed by the said encryption subsystem will be the same as the media key computed by the decryption subsystem provided that neither the device key assigned to the encryption subsystem nor the device key assigned to the decryption subsystem have been compromised.

9. The system of claim 2, wherein said storage medium is selected from a digital versatile disc (DVD), CD-ROM, optical disc, magneto-optical disc, flash-based memory, magnetic card and optical card.

10. The system of claim 2, wherein said number generator is a random number generator residing within said decryption subsystem.

11. A method comprising:

a storage device reading a key distribution data block from a storage medium;

the storage device processing at least a portion of said key distribution data block using at least one device key to compute a media key;

the storage device fetching a nonce generated by a number generator;

the storage device combining said nonce with said media key using a one-way function to generate a bus key;

the storage device encrypting data read from the storage medium using the bus key generated by the storage device; and

the storage device transmitting the encrypted data over a data bus.

12. The method of claim 11, wherein said data transmitted over the data bus is encrypted using the bus key derived based on the nonce generated by the number generator such that if said data is recorded at the time of transmission, said recorded data is not subsequently playable by a host device that does not have access to the same nonce used by the storage device to encrypted said data transmitted over the data bus.

13. The method of claim 11, further comprising decrypting the encrypted data received over the data bus.

14. The method of claim 13, wherein said decrypting the encrypted data received over the data bus comprises:

a host device reading the key distribution data block from the storage medium;

the host device processing at least a portion of the key distribution data block using at least one device key to compute a media key;

the host device fetching the nonce generated by the number generator;

the host device combining said media key with the nonce using a one-way function to generate a bus key; and

the host device decrypting said encrypted data received over the data bus using the bus key generated by the host device.

15. The method of claim 14, further comprising:

the host device requesting a descramble key required for descrambling scrambled content from said storage device;

the storage device encrypting said descramble key read from said storage medium with said bus key generated by said storage device and sending said encrypted descramble key to the host device;

the host device decrypting said encrypted descramble key received from said storage device using said bus key generated by said host device.

the host device descrambling said decrypted data using said descramble key decrypted by said host device.

16. The method of claim 11, wherein said key distribution data block is embodied in the form of a media key block comprising a block of encrypted data.

17. The method of claim 14, wherein said number generator is a random number generator residing within the host device.

19. The apparatus of claim 18, further comprising a host device coupled to said storage device via said data bus, said host device including a processing logic, a one-way function and a decryption logic, wherein said processing logic processes at least a portion of said key distribution data block using a device key assigned to said host device to compute a media key, said one-way function combines said media key with said nonce generated by said number generator to produce a bus key and said decryption logic decrypts said encrypted data received over the data bus using said bus key.

20. The apparatus of claim 18, wherein said data transmitted over the data bus is encrypted using the bus key derived based on the nonce generated by the number generator such that if said data is recorded at the time of transmission, said recorded data is not subsequently playable by a host device that does not have access to the same nonce used by said storage device to encrypted said data transmitted over the data bus.

21. The apparatus of claim 19, wherein said media key computed by the said storage device will be the same as the media key computed by the host device provided that neither the device key assigned to the storage device nor the device key assigned to the host device have been compromised.

22. The apparatus of claim 19, wherein said number generator is a random number generator residing within said host device.

23. The apparatus of claim 19, wherein said storage device is embodied in the form of a DVD drive and said host device is embodied in the form of either a DVD player or a personal computer.

24. The apparatus of claim 19, wherein said storage medium is selected from a digital versatile disc (DVD), CD-ROM, optical disc, magneto-optical disc, flash-based memory, magnetic card and optical card.

25. The apparatus of claim 19, wherein said storage medium is embodied in the form of a DVD containing scrambled content.

26. The apparatus of claim 19, wherein said key distribution data block is embodied in the form of a media key block comprising a block of encrypted data.

18. An apparatus comprising:

a storage device to access a storage medium containing data and a key distribution data block, said storage device including a processing logic, a one-way function and an encryption logic, wherein said processing logic processes at least a portion of said key distribution data block using a device key assigned to said storage device to compute a media key, said one-way function combines said media key with a nonce generated by a number generator to produce a bus key and said encryption logic encrypts said data accessed from said storage medium using said bus key prior to transmitting the encrypted data via a data bus.