Method and system for a secure digital decoder with secure key distribution

• US 20070083769A1
• Filed: 12/07/2006
• Published: 04/12/2007
• Est. Priority Date: 10/24/2000
• Status: Abandoned Application

• Current Assignee: Ryuichi Iwamura
• Original Assignee: Ryuichi Iwamura
• Inventors: Iwamura, Ryuichi
• Application Number:
  US11/636,113
• Publication Number:
  US 20070083769A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 7/163 by receiver means only
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A method and system for securely decrypting and decoding a digital signal is disclosed. One embodiment of the present invention first accesses an encrypted signal at a first logical circuit. Next, this embodiment determines a broadcast encryption key for the encrypted signal at a second logical circuit separate from the first logical circuit. For example, the second logical circuit where the broadcast key was determined may be across a communication link from the first circuit where the signal is being received. Then, the broadcast encryption key is encrypted by means of a public key and transferred over the communication link. Next, at the first logical circuit, the encrypted broadcast encryption key is decrypted. Therefore, the broadcast encryption key is determined. Then, at the first logical circuit, the encrypted signal is decrypted using the broadcast encryption key. Consequently, the encrypted signal is decrypted without exposing the broadcast encryption key on the communication link in an un-encrypted form.

Claims

1. A method of securely processing a digital signal comprising:

a) generating a first public encryption key for use with a first logical circuit and a second logical circuit, and generating a second public encryption key for use with said first logical circuit and a third logical circuit;

in a digital media receiving device;

b) generating a local encryption key and a local decryption key at said first logical circuit;

c) at said first logical circuit, encrypting said local encryption key by use of said first public encryption key and encrypting said local decryption key by use of said second public encryption key;

d) transferring said encrypted local encryption key to said second logical circuit and transferring said encrypted local decryption key to said third logical circuit across a communication link;

e) decrypting said encrypted local encryption key at said second logical circuit and decrypting said encrypted local decryption key at said third logical circuit; and

f) transferring said digital signal in encrypted form from said second logical circuit to said third logical circuit across a second communication link.

2. The method of claim 1 wherein f) comprises:

f1) encrypting said digital signal at said second logical circuit using said local encryption key;

f2) transferring said digital signal in encrypted form across said second communication link between said second logical circuit and said third logical circuit; and

f3) decrypting said encrypted form of said digital signal at said third logical circuit using said local decryption key.

3. The method of claim 1 wherein e) comprises:

e1) decrypting said encrypted local encryption key at said second logical circuit using said first public encryption key; and

e2) decrypting said encrypted local decryption key at said third logical circuit using said second public encryption key.

4. The method of claim 1 wherein c) comprises:

c1) accessing said first public encryption key from a first portion of local memory of said first logical circuit; and

c2) accessing a computer control program from a second portion of local memory of said first logical circuit; and

c3) executing said computer control program on said first logical circuit to encrypt said first local encryption key.

5. The method of claim 1 wherein c) comprises:

c1) accessing said first public encryption key from a first portion of local memory of said first logical circuit;

c2) replacing a computer control program stored in a second portion of local memory at said first logical circuit with a new computer control program;

c3) accessing said new computer control program from said second portion of local memory; and

c4) executing said new computer control program on said first logical circuit to encrypt said first local encryption key.

6. The method of claim 1 wherein a) comprises generating said first public encryption key and said second public encryption key using the technique of Diffie-Hellman Key Exchange.

7. The method of claim 1 wherein e) comprises:

e1) accessing a decryption key from a first portion of local memory of said second logical circuit;

e2) accessing a computer control program from a second portion of local memory of said second logical circuit; and

e3) executing said computer control program on said second logical circuit to decrypt said local encryption key.

8. The method of claim 1 wherein e) comprises:

e1) accessing a decryption key from a first portion of local memory of said second logical circuit;

e2) replacing a computer control program stored in a second portion of local memory at said second logical circuit with a new computer control program;

e3) accessing said new computer control program from said second portion of local memory; and

e4) executing said new computer control program on said second logical circuit to decrypt said local encryption key.

9. The method of claim 1 wherein the encryption of said digital signal at said second logical circuit and the decryption of said encrypted digital signal at said third logical circuit are conducted in accordance with the procedures of the Data Encryption Standard.