METHOD, SYSTEM AND PROGRAM PRODUCT FOR ATTACHING A TITLE KEY TO ENCRYPTED CONTENT FOR SYNCHRONIZED TRANSMISSION TO A RECIPIENT

• US 20080273702A1
• Filed: 02/20/2008
• Published: 11/06/2008
• Est. Priority Date: 04/18/2002
• Status: Active Grant

• Current Assignee: Eric M. Foster, Florian Pestoni, Frank A. Schaffa, Jeffrey B. Lotspiech, Wilfred E. Plouffe
• Original Assignee: Eric M. Foster, Florian Pestoni, Frank A. Schaffa, Jeffrey B. Lotspiech, Wilfred E. Plouffe
• Inventors: Lotspiech, Jeffrey B., Pestoni, Florian, Schaffa, Frank A., Plouffe, Wilfred E., Foster, Eric M.
• Granted Patent: US 9,300,465 B2
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00362 the key being obtained from a media key block [MKB]
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner

Abstract

A method and system for attaching a title key to encrypted content for synchronized transmission to, or storage by, a recipient is provided. Specifically, under the present invention, an elementary media stream is parceled into content units that each include a content packet and a header. The content packets are encrypted with one or more title keys. Once the content packets have been encrypted, the title keys are themselves encrypted with a key encrypting key. The encrypted title keys are then attached to the corresponding encrypted content packets for synchronized transmission to a recipient.

Claims

1. A method for attaching a title key to encrypted content for synchronized transmission to a recipient, comprising the steps of:

encrypting content with a title key;

encrypting the title key with a key encrypting key; and

attaching the encrypted title key to the encrypted content for synchronized transmission to a recipient.

2. The method of claim 1, further comprising the step of synchronously transmitting the encrypted content and the attached encrypted title key to a recipient.

3. The method of claim 1, further comprising the steps of:

receiving an elementary content stream; and

parceling the elementary content stream into content units, prior to encrypting the content, wherein each content unit includes content and a header.

4. The method of claim 3, further comprising the step of parsing the headers from the content, prior to encrypting the content.

5. The method of claim 1, further comprising the step of attaching identifier information and a verifier to the encrypted content.

6. The method of claim 5, wherein the verifier comprises a known value encrypted with the title key.

7. A method for attaching a title key to encrypted content for synchronized transmission to a recipient, comprising the steps of:

providing a content unit that includes a content packet and a header;

encrypting the content packet with a title key;

encrypting the title key with a key encrypting key;

attaching a header extension that includes the encrypted title key to the encrypted content packet; and

synchronously transmitting the header, the header extension and the encrypted content to a recipient.

8. The method of claim 7, wherein the header extension further includes a verifier and identifier information.

9. The method of claim 8, wherein the verifier comprises a known value encrypted with the title key.

10. The method of claim 9, further comprising the steps of:

the recipient storing the encrypted content and the header extension;

the recipient determining the key encrypting key using a key management block;

the recipient decrypting the title key with the key encrypting key;

the recipient decrypting the known value with the title key; and

the recipient decrypting the content packet.

11. A system for attaching a title key to encrypted content for synchronized transmission to a recipient, comprising:

a computer having;

a system for encrypting a content packet with a title key;

a system for encrypting the title key with a key encrypting key; and

a system for attaching a header extension that includes the encrypted title key to the encrypted content packet.

12. The system of claim 11, further comprising a system for synchronously transmitting the encrypted content and the attached header extension to a recipient.

13. The system of claim 11, wherein the header extension further includes identifier information and a verifier.

14. The system of claim 13, wherein the verifier comprises a known value encrypted with the title key.

15. The system of claim 13, wherein the identifier information comprises mask values for avoiding aliasing reserved bit pattern.

16. A program product stored on a recordable medium for attaching a title key to encrypted content for synchronized transmission to a recipient, which when executed, comprises:

program code for encrypting a content packet with a title key;

program code for encrypting the title key with a key encrypting key; and

program code for attaching a header extension that includes the encrypted title key to the encrypted content packet.

17. The program product of claim 16, further comprising program code for synchronously transmitting the header extension and the encrypted content to a recipient.

18. The program product of claim 16, wherein the header extension further includes identifier information and a verifier.