METHOD AND APPARATUS FOR FACILITATING PROVISION OF CONTENT PROTECTED BY IDENTITY-BASED ENCRYPTION

• US 20110238985A1
• Filed: 03/24/2010
• Published: 09/29/2011
• Est. Priority Date: 03/24/2010
• Status: Abandoned Application

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Sovio, Sampo Juhani, Luukkala, Vesa-Veikko
• Application Number:
  US12/730,884
• Publication Number:
  US 20110238985A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 9/0847 involving identity based encryption [IBE] schemes
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/63775 for uploading keys, e.g. for a client to communicate its public key to the server key management H04L9/08; network support of key management H04L63/06

Abstract

An approach is provided for reducing communication traffic/cost and protecting content. A criterion application causes, at least in part, reception at a first recipient one or more first data encrypted with one or more first recipient criteria as a public key of identity-based encryption, the first data including one or more first instructions. The criterion application matches one or more second recipient criteria corresponding to the first recipient against the first recipient criteria that encrypted the first data. The criterion application decrypts with a first decryption key one or more of the first data corresponding to at least a matched one of the first recipient criteria, when one or more of the second recipient criteria match the at least one of the first recipient criteria. The criterion application executes automatically or on demand at the first recipient one or more of the first instructions included in decrypted first data.

Claims

1. A method comprising:

causing, at least in part, reception at a first recipient one or more first data that are encrypted with one or more first recipient criteria as a public key of identity-based encryption, the first data including one or more first instructions; and

matching one or more second recipient criteria corresponding to the first recipient against the one or more first recipient criteria that encrypted the one or more first data;

decrypting with a first decryption key one or more of the first data corresponding to at least a matched one of the first recipient criteria, when one or more of the second recipient criteria match the at least one of the first recipient criteria; and

executing automatically or on demand at the first recipient one or more of the first instructions included in decrypted first data.

2. A method of claim 1, wherein the first recipient includes at least one first node, at least one first information store, or a combination thereof.

3. A method of claim 2, wherein at least one of the first data further includes second data that is encrypted with one or more third recipient criteria each as a public key of identity-based encryption;

and wherein the second data is set to be decrypted with a second decryption key by a second recipient, the second recipient includes at least one second node, at least one second information store, or a combination thereof.

4. A method of claim 3, wherein the one or more first instructions include at least one of:

generating internally or requesting externally the second decryption key by the first recipient,

causing, at least in part, transmission of the second decryption key from the first recipient to the second recipient,

decrypting the second data with the second decryption key,

causing, at least in part, transmission of decrypted second data to the second recipient,

creating an account for a sender of the first data, the first recipient, the second recipient, one or more other recipients, or a combination thereof,

setting up a communication session between or among the sender, the first recipient, the second recipient, and one or more other recipients, and

causing, at least in part, transmission of data between or among the sender, the first recipient, the second recipient, and one or more other recipients.

5. A method of claim 3, further comprising:

matching the second recipient criteria corresponding to the first recipient against the one or more third recipient criteria that encrypted the second data;

decrypting the second data with a second description key, when the second recipient criteria match at least one of the third recipient criteria; and

executing automatically or on demand by the first recipient one or more second instructions included in decrypted second data.

6. A method of claim 1, further comprising:

decrypting third data with the first description key, when the third data is different from the first data and the third data was encrypted with the one or more first recipient criteria; and

executing automatically or on demand by the first recipient one or more instructions included in decrypted third data.

7. A method of claim 2, further comprising:

formatting each of the first recipient criteria, the second recipient criteria, the third recipient criteria, the first data, the second data or a combination thereof into respective predetermined information representation structures;

constructing reduced ordered binary decision diagrams from the information representation structures; and

computing a hash identifier corresponding to respective ones of the reduced ordered binary decision diagrams,

wherein the first recipient criteria, the second recipient criteria, the third recipient criteria, the first data, the second data, or a combination thereof are transmitted or received in as at least one of the information representation structure, the reduced ordered binary decision diagram, and the hash identifier.

8. A method of claim 3, wherein the one or more recipient criteria of an information store include terms of sale, service, technical support, license and privacy, a technical capability of store facilities, context information associated with the store, consumer review and complaint history, litigations and government actions, or a combination thereof;

and wherein the one or more recipient criteria of an node include at least one of a user personality feature, a technical capability of a receiving device, a usage pattern of the device, an environmental condition in which the device is used, and context information associated with the device.

9. An apparatus comprising:

at least one processor; and

at least one memory including computer program code,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

cause, at least in part, reception at a first recipient one or more first data that are encrypted with one or more first recipient criteria as a public key of identity-based encryption, the first data including one or more first instructions; and

match one or more second recipient criteria corresponding to the first recipient against the one or more first recipient criteria that encrypted the one or more first data;

decrypt with a first decryption key one or more of the first data corresponding to at least a matched one of the first recipient criteria, when one or more of the second recipient criteria match the at least one of the first recipient criteria; and

execute automatically or on demand at the first recipient one or more of the first instructions included in decrypted first data.

10. An apparatus of claim 9, wherein the first recipient includes at least one first node, at least one first information store, or a combination thereof.

11. An apparatus of claim 10, wherein at least one of the first data further includes second data that is encrypted with one or more third recipient criteria each as a public key of identity-based encryption;

and wherein the second data is set to be decrypted with a second decryption key by a second recipient, the second recipient includes at least one second node, at least one second information store, or a combination thereof.

12. An apparatus of claim 11, wherein the one or more first instructions include at least one of:

generate internally or requesting externally the second decryption key by the first recipient,

cause, at least in part, transmission of the second decryption key from the first recipient to the second recipient,

decrypt the second data with the second decryption key,

cause, at least in part, transmission of decrypted second data to the second recipient,

create an account for a sender of the first data, the first recipient, the second recipient, one or more other recipients, or a combination thereof,

set up a communication session between or among the sender, the first recipient, the second recipient, and one or more other recipients, and

cause, at least in part, transmission of data between or among the sender, the first recipient, the second recipient, and one or more other recipients.

13. An apparatus of claim 9, wherein the apparatus is further caused to:

match the second recipient criteria corresponding to the first recipient against the one or more third recipient criteria that encrypted the second data;

decrypt the second data with a second description key, when the second recipient criteria match at least one of the third recipient criteria; and

execute automatically or on demand by the first recipient one or more second instructions included in decrypted second data.

14. An apparatus of claim 9, wherein the apparatus is further caused to:

decrypt third data with the first description key, when the third data is different from the first data and the third data was encrypted with the one or more first recipient criteria; and

execute automatically or on demand by the first recipient one or more instructions included in decrypted third data.

15. An apparatus of claim 10, wherein the apparatus is further caused to:

format each of the first recipient criteria, the second recipient criteria, the third recipient criteria, the first data, the second data or a combination thereof into respective predetermined information representation structures;

construct reduced ordered binary decision diagrams from the information representation structures; and

compute a hash identifier corresponding to respective ones of the reduced ordered binary decision diagrams,

wherein the first recipient criteria, the second recipient criteria, the third recipient criteria, the first data, the second data, or a combination thereof are transmitted or received in as at least one of the information representation structure, the reduced ordered binary decision diagram, and the hash identifier.

16. An apparatus of claim 11, wherein the one or more recipient criteria of an information store include terms of sale, service, technical support, license and privacy, a technical capability of store facilities, context information associated with the store, consumer review and complaint history, litigations and government actions, or a combination thereof;

and wherein the one or more recipient criteria of an node include at least one of a user personality feature, a technical capability of a receiving device, a usage pattern of the device, an environmental condition in which the device is used, and context information associated with the device.

17. A computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus to at least perform the following steps:

causing, at least in part, reception at a first recipient one or more first data that are encrypted with one or more first recipient criteria as a public key of identity-based encryption, the first data including one or more first instructions; and

matching one or more second recipient criteria corresponding to the first recipient against the one or more first recipient criteria that encrypted the one or more first data;

decrypting with a first decryption key one or more of the first data corresponding to at least a matched one of the first recipient criteria, when one or more of the second recipient criteria match the at least one of the first recipient criteria; and

executing automatically or on demand at the first recipient one or more of the first instructions included in decrypted first data.

18. A computer-readable storage medium of claim 17, wherein the first recipient includes at least one first node, at least one first information store, or a combination thereof.

19. A computer-readable storage medium of claim 18, wherein at least one of the first data further includes second data that is encrypted with one or more third recipient criteria each as a public key of identity-based encryption;

and wherein the second data is set to be decrypted with a second decryption key by a second recipient, the second recipient includes at least one second node, at least one second information store, or a combination thereof.

20. A computer-readable storage medium of claim 19, wherein the one or more first instructions include at least one of:

generating internally or requesting externally the second decryption key by the first recipient,

causing, at least in part, transmission of the second decryption key from the first recipient to the second recipient,

decrypting the second data with the second decryption key,

causing, at least in part, transmission of decrypted second data to the second recipient,

creating an account for a sender of the first data, the first recipient, the second recipient, one or more other recipients, or a combination thereof,

setting up a communication session between or among the sender, the first recipient, the second recipient, and one or more other recipients, and

causing, at least in part, transmission of data between or among the sender, the first recipient, the second recipient, and one or more other recipients.

21-49. -49. (canceled)