METHOD AND APPARATUS FOR SECURE KEY DELIVERY FOR DECRYPTING BULK DIGITAL CONTENT FILES AT AN UNSECURE SITE

• US 20080181414A1
• Filed: 12/11/2007
• Published: 07/31/2008
• Est. Priority Date: 07/08/2003
• Status: Active Grant

• Current Assignee: Bruker Daltonics, Inc. (Bruker Corporation), Callahan Cellular LLC (Intellectual Ventures LLC)
• Original Assignee: Copyright Clearance Center, Inc.
• Inventors: Deaver, John, Klebe, Skott C., Johnson, Woodrow W.
• Granted Patent: US 8,130,963 B2
• Time in Patent Office: Days
• US Class Current: 380/279
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/631 Multimode Transmission, e.g. transmitting basic layers and enhancement layers of the content over different transmission paths or transmitting with different error corrections, different keys or with different transmission protocols
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection

Abstract

Rather than downloading each content document on demand from the publisher location to the user site, at the publisher location, each content document is encrypted and then multiple encrypted documents are assembled into a distribution archive that is itself encrypted with a scheduled key. The distribution archive is then downloaded into a content server at the user site. When the content server receives the distribution archive, it decrypts the archive file and unpacks the encrypted documents. The scheduled key used to decrypt an archive file is included with an archive file that was sent previously to the user site in accordance with the subscription service. The scheduled key to decrypt the first archive file sent to the user is sent from the publisher to the user over a communication channel different from the communication channel used to send the archive file from the publisher to the user.

Claims

1. A method for secure key delivery for decrypting a distribution archive file containing a plurality of digital content documents at an unsecured site that receives a stream of distribution archive files from a publishing site, the method comprising:

(a) at the publishing site, encrypting each digital content document with a key to generate encrypted document content;

(b) at the publishing site, computing for each document a document identifier that is computed from, but cannot be derived solely from, the encrypted content of that document;

(c) at the publishing site, creating a list of document identifier and decryption key pairs;

(d) at the publishing site, assembling the encrypted document content for each content document and the key pair list into a distribution archive file;

(e) at the publishing site, encrypting the distribution archive file with a scheduled key unique to that distribution archive file and placing the encrypted distribution file on the stream;

(f) at the unsecured site, selecting a distribution archive file from the stream;

(g) at the unsecured site, extracting a scheduled key from the selected distribution archive file in the stream;

(h) at the unsecured site, using the extracted scheduled key to decrypt the next subsequent distribution archive file in the stream following the selected distribution archive file;

(i) removing the encrypted document content and the key pair list from the decrypted distribution archive file and storing them at the unsecured site; and

(j) selecting the distribution archive file decrypted in step (h); and

(k) repeating steps (g), (h), (i) and (j) for each distribution archive file in the stream.

2. The method of claim 1 further comprising:

(l) receiving a scheduled key at the unsecured site to decrypt the first distribution archive file in the stream from the publishing site.

3. The method of claim 1 wherein step (e) comprises encrypting, with a scheduled key, a distribution archive file including a scheduled key for the next distribution archive file in the stream and the plurality of encrypted content files.

4. The method of claim 1 wherein step (e) comprises encrypting, with a scheduled key, a distribution archive file including the plurality of encrypted content files and a non-encrypted scheduled key for the next distribution archive file.

5. The method of claim 1 wherein step (b) comprises computing for each document a document identifier using a text string embedded in program code in the publishing site.

6. The method of claim 1 wherein step (e) comprises generating a new scheduled key, encrypting the new scheduled key and including the encrypted scheduled key in the distribution archive file.

7. The method of claim 1 wherein step (g) comprises temporarily storing an extracted scheduled key in encrypted form.

8. The method of claim 1 further comprising recomputing a document identifier at the unsecured site with a text string embedded in program code located at the unsecured site.

9. The method of claim 8 wherein the text string embedded in program code in the publishing site is the same as the text string embedded in program code at the unsecured site.

10. An apparatus for secure key delivery for decrypting a distribution archive file containing a plurality of digital content documents at an unsecured site that receives a stream of distribution archive files from a publishing site, the apparatus comprising:

at the publishing site, an encryption engine that encrypts each digital content document with a key to generate encrypted document content;

at the publishing site, an OID calculator that computes for each document a document identifier that is computed from, but cannot be derived solely from, the encrypted content of that document;

at the publishing site, means for creating a list of document identifier and decryption key pairs;

at the publishing site, means for assembling the encrypted document content for each content document and the key pair list into a distribution archive;

at the publishing site, means for encrypting the distribution archive file with a scheduled key unique to that distribution archive file;

at the unsecured site, a key decryptor that extracts a scheduled key from each distribution archive file in the stream;

means for temporarily storing the extracted scheduled key at the unsecured site;

at the unsecured site, a decryption engine that uses the stored scheduled key to decrypt the next distribution archive file in the stream following the distribution archive file from which the scheduled key was extracted; and

a file system that removes the encrypted document content and the key pair list from the decrypted archive file and stores them at the unsecured site.

11. The apparatus of claim 10 further comprising means for receiving a scheduled key for the first distribution archive file in the stream from the publishing site.

12. The apparatus of claim 10 wherein the apparatus further comprises an encryption engine that encrypts, with a scheduled key, a distribution archive file including a scheduled key for the next distribution archive file in the stream and the plurality of encrypted content files.

13. The apparatus of claim 10 wherein the apparatus further comprises an encryption engine that encrypts, with a scheduled key, a distribution archive file including the plurality of encrypted content files and a non-encrypted scheduled key for the next distribution archive file.

14. The apparatus of claim 10 wherein the OID calculator comprises means computing for each document a document identifier using a text string embedded in program code in the publishing site.

15. The apparatus of claim 10 wherein the means for encrypting the distribution archive with a scheduled key comprises a key generator that generates a new scheduled key, a key encryptor that encrypts the new scheduled key and means for including the encrypted scheduled key in the distribution archive.

16. The apparatus of claim 10 wherein the means for temporarily storing the extracted scheduled key comprises means for storing an extracted scheduled key in encrypted form.

17. The apparatus of claim 10 further comprising means for recomputing a document identifier with a text string embedded in program code located at the unsecured site.

18. The apparatus of claim 17 wherein the text string embedded in program code in the publishing site is the same as the text string embedded in program code at the unsecured site.

19. A computer program product for secure key delivery for decrypting a distribution archive file containing a plurality of digital content files at an unsecured site that receives a stream of distribution archive files from a publishing site, the computer program product comprising a computer usable medium having computer readable program code thereon, including:

program code at the publishing site, for encrypting each digital content document with a key to generate encrypted document content;

program code at the publishing site, for computing for each document a document identifier that is computed from, but cannot be derived solely from, the encrypted content of that document;

program code at the publishing site, for creating a list of document identifier and decryption key pairs;

program code at the publishing site, for assembling the encrypted document content for each content document and the key pair list into a distribution archive file; and

program code at the publishing site, for encrypting the distribution archive file with a scheduled key unique to that distribution archive file and for placing the encrypted distribution file on the stream;

program code at the unsecured site for extracting a scheduled key from each distribution archive file in the stream;

program code at the unsecured site for temporarily storing the extracted scheduled key;

program code at the unsecured site for using the stored scheduled key to decrypt the next distribution archive file in the stream following the distribution archive file from which the scheduled key was extracted; and

program code for removing the encrypted document content and the key pair list from the decrypted archive file and for storing them at the unsecured site.

20. The computer program product of claim 19 wherein the program code at the publishing site for computing a document identifier comprises means for computing a document identifier using a text string embedded in program code in the publishing site and wherein the computer program product further comprises program code for recomputing a document identifier with a text string embedded in program code located at the unsecured site.

21. The computer program product of claim 20 wherein the text string embedded in program code in the publishing site is the same as the text string embedded in program code at the unsecured site.