Secure transfer of data

• US 20070091914A1
• Filed: 05/28/2004
• Published: 04/26/2007
• Est. Priority Date: 06/05/2003
• Status: Abandoned Application

• Current Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Original Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Inventors: Ashley, Alexis
• Application Number:
  US10/559,053
• Publication Number:
  US 20070091914A1
• Time in Patent Office: Days
• US Class Current: 370/462
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833

Abstract

A system for enabling secure transfer of data comprises a receiving device (10) for transmitting a request for data to a sending device (12), a sending device (12) for receiving the request for data and for transmitting the data encrypted with a first key (14) to the receiving device (10), and a server (16) for receiving the encrypted data and identification information from the receiving device (10), the server arranged for partially decrypting the data with a second key (18), and transmitting the partially decrypted data to the receiving device. The receiving device (10) is arranged to decrypt the partially decrypted data received from the server (16) with a third key (20).

Claims

1. A system for enabling secure transfer of data comprising a receiving device (10) for transmitting a request for data, a sending device (12) for receiving the request for data and for transmitting the data encrypted with a first key (14), and a server (16) for receiving the data and identification information, for partially decrypting the data with a second key (18), and for transmitting the partially decrypted data.

2. A system according to claim 1, wherein the receiving device (10) is arranged to receive the data from the sending device (12) and to retransmit the data with the identification information to the server (16).

3. A system according to claim 1, wherein the receiving device (10) is arranged to decrypt the partially decrypted data received from the server (16) with a third key (20).

4. A system according to claim 1, wherein the data comprises a session key for decrypting content.

5. A system according to claim 1, wherein the identification information comprises a group membership identifier.

6. A system according to claim 1, wherein the server (16) is arranged to generate the first, second and third keys (14, 18, 20) and to securely transmit the first key (14) to the sending device (12) and to securely transmit the third key (20) to the receiving device (10).

7. A system according to claim 1, wherein the receiving device (10), the sending device (12) and the server (16) are remotely located from one another and are each connected to a wide area network.

8. A system according to claim 7, wherein the wide area network is the Internet.

9. A method for enabling secure transfer of data comprising transmitting (22) a request for data, receiving (24) the data encrypted with a first key (14), transmitting (26) the data and identification information, receiving (28) the data partially decrypted with a second key (18), and decrypting (30) the data with a third key (20).

10. A method according to claim 9, wherein the data comprises a session key for decrypting content.

11. A method according to claim 9, wherein the identification information comprises a group membership identifier.

12. A device for enabling secure transfer of data comprising a network interface (34) for transmitting a request for data, for receiving the data encrypted with a first key (14), for transmitting the data and identification information, and for receiving the data partially decrypted with a second key (18), and a processor (32) for controlling the network interface (34), and for decrypting the data with a third key (20).

13. A device according to claim 12, and further comprising a storage device (38) for storing the data.

14. A device according to claim 12, and further comprising a user interface (36) for receiving the request data from a user.

15. A device according to claim 12, rein the data comprises a session key for decrypting content.

16. A device according to claim 12, wherein the identification information comprises a group membership identifier.