Method and apparatus for security in a data processing system

• US 20020141591A1
• Filed: 08/20/2001
• Published: 10/03/2002
• Est. Priority Date: 03/28/2001
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Rezaiifar, Ramin, Rose, Gregory G., Hsu, Raymond T., Hawkes, Philip
• Granted Patent: US 8,121,296 B2
• Time in Patent Office: Days
• US Class Current: 380/278
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 12/1877 Measures taken prior to transmission
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/611 for multicast or broadcast systems for broadcast or conference H04L12/18; arrangements for broadcast or distribution combined with broadcast H04H20/00; arrangements for broadcast applications with a direct linkage to broadcast information or to broadcast space-time H04H60/00; selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS], H04W4/06
• CPC Class Codes: H04L 65/65 Network streaming protocols, e.g. real-time transport protocol [RTP] or real-time control protocol [RTCP]
• CPC Class Codes: H04L 65/70 Media network packetisation
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 69/04 Protocols for data compression, e.g. ROHC
• CPC Class Codes: H04L 69/16 : Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 : Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/164 : Adaptation or special uses of UDP protocol
• CPC Class Codes: H04L 69/22 : Parsing or analysis of headers
• CPC Class Codes: H04L 69/32 : Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
• CPC Class Codes: H04L 9/0891 : Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/30 : Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: H04W 12/03 : Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/041 : Key generation or derivation

Abstract

Method and apparatus for secure transmissions. Each user is provided a registration key. A long-time updated broadcast key is encrypted using the registration key and provided periodically to a user. A short-time updated key is encrypted using the broadcast key and provided periodically to a user. Broadcasts are then encrypted using the short-time key, wherein the user decrypts the broadcast message using the short-time key.

Claims

1. A method for secure transmissions, the method comprising:

determining a registration key specific to a participant in a transmission;

determining a first key;

encrypting the first key with the registration key;

determining a second key;

encrypting the second key with the first key; and

updating the first and second keys.

2. The method as in claim 1, wherein updating further comprises:

updating the first key according to a first time period; and

updating the second key according to a second time period, wherein the second time period is less than the first time period.

3. The method as in claim 2, wherein updating further comprises:

encrypting an updated first key with the registration key; and

encrypting an updated second key with the updated first key.

4. The method as in claim 2, further comprising:

encrypting a broadcast stream of information using the second key; and

transmitting the encrypted broadcast stream of information.

5. The method as in claim 4, wherein the broadcast stream of information comprises video information.

6. The method as in claim 4, wherein the broadcast stream of information comprises Internet Protocol packets.

7. The method as in claim 3, further comprising:

calculating a registration key information message; and

transmitting the registration key information message.

8. The method as in claim 7, further comprising:

calculating a first key information message corresponding to the updated and encrypted first key; and

transmitting the first key information message.

9. The method as in claim 8, further comprising:

calculating a second key information message corresponding to the updated and encrypted second key; and

transmitting the second key information message.

10. The method as in claim 1, further comprising:

transmitting the encrypted first key; and

transmitting the encrypted second key.

11. A method for secure reception of a transmission, the method comprising:

receiving a registration key specific to a participant in a transmission;

receiving a first key;

decrypting the first key with the registration key;

receiving a second key;

decrypting the second key with the first key;

receiving a broadcast stream of information; and

decrypting the broadcast stream of information using the second key.

12.he. The method as in claim 11, further comprising:

storing the first key in a secure memory storage unit; and

storing the second key in a memory storage unit.

13. The method as in claim 11, further comprising:

recovering the first key from a first key information message; and

recovering the second key from a second key information message.

14.he. The method as in claim 11, further comprising:

updating the first key according to a first time period; and

updating the second key according to a second time period.

16.he. The infrastructure element as in claim 15, wherein the short-time key is processed by the user identification unit and passed to the mobile equipment unit.

17. The infrastructure element as in claim 15, wherein the memory storage unit is a secure memory storage unit.

18.he. The infrastructure element as in claim 15, wherein the memory storage unit stores a broadcast access key, and wherein the processing unit decrypts the short-time key using the broadcast access key.

19.he. The infrastructure element as in claim 18, wherein the short-time key is updated at a first frequency.

20.he. The infrastructure element as in claim 19, wherein the broadcast access key is updated at a second frequency less than the first frequency.

21.he. The infrastructure element as in claim 15, wherein the broadcast service option is a video service.

15. In a wireless communication system supporting a broadcast service option, an infrastructure element comprising:

a receive circuitry;

a user identification unit, operative to recover a short-time key for decrypting a broadcast message, comprising;

processing unit operative to decrypt key information;

memory storage unit for storing a registration key; and

a mobile equipment unit adapted to apply the short-time key for decrypting the broadcast message.

22. A wireless communication system, comprising:

means for determining a registration key specific to a participant in a transmission;

means for determining a first key;

means for encrypting the first key with the registration key;

means for determining a second key;

means for encrypting the second key with the first key; and

means for updating the first and second keys.

23.n. An infrastructure element, comprising:

means for receiving a registration key specific to a participant in a transmission;

means for receiving a first key;

means for decrypting the first key with the registration key;

means for receiving a second key;

means for decrypting the second key with the first key;

means for receiving a broadcast stream of information; and

means for decrypting the broadcast stream of information using the second key.

24. A digital signal storage device, comprising:

first set of instructions for receiving a registration key specific to a participant in a transmission;

second set of instructions for receiving a first key;

third set of instructions for decrypting the first key with the registration key;

fourth set of instructions for receiving a second key;

fifth set of instructions for decrypting the second key with the first key;

sixth set of instructions for receiving a broadcast stream of information; and

seventh set of instructions for decrypting the broadcast stream of information using the second key.