METHOD AND SYSTEM FOR SECURING COMMUNICATION ON A HOME GATEWAY IN AN IP CONTENT STREAMING SYSTEM

• US 20120216034A1
• Filed: 06/28/2011
• Published: 08/23/2012
• Est. Priority Date: 02/23/2011
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Avago Technologies General IP PTE Limited (Broadcom, Inc.)
• Inventors: Chen, Xuemin, Rodgers, Stephane
• Granted Patent: US 9,438,415 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates

Abstract

A home gateway, which enables communication with a plurality of devices, recovers a root-content key from a key server of a service provider for secure delivery of content requested by a client device. The recovered root-content key is utilized to generate a content key for corresponding content scrambling. The home gateway communicates the scrambled content to the client device. The home gateway utilizes the RSA protocol to request the root-content key from the key server. The root-content key is recovered from the received key index. The content key is encrypted utilizing a public key and delivered to the client device. The key server distributes the public key to the gateway through authentication messages. The client device utilizes its own private key to recover the content key by decrypting the encrypted content key. The scrambled content from the home gateway is descrambled using the recovered content key for content consumption.

Claims

1. A method for networking, the method comprising:

in a home gateway that enables communication with a plurality of devices;

recovering a root-content key from a key server of a service provider for content requested by one of said plurality of devices;

generating a content key corresponding to said requested content, utilizing said recovered root-content key;

scrambling said content utilizing said generated content key; and

communicating said scrambled content to said one of said plurality of devices.

2. The method of claim 1, comprising requesting said root-content key from said key server utilizing a signed key exchange protocol.

3. The method of claim 2, comprising receiving key index of said root-content key from said key server subsequent to said requesting.

4. The method according to claim 3, comprising recovering said root-content key based on said received key index.

5. The method according to claim 4, comprising generating said content key utilizing said recovered root-content key.

6. The method according to claim 5, comprising encrypting said generated content key utilizing a public key from said key server;

and communicating said encrypted content key to said one of said plurality of devices.

7. The method according to claim 6, comprising receiving authentication messages from said key server, wherein said received authentication messages comprise said public key.

8. The method according to claim 6, wherein said one of said plurality of devices recovers said generated content key by decrypting said encrypted content key from said home gateway utilizing a private key of said one of said plurality of devices.

9. The method according to claim 8, wherein said one of plurality of devices receives authentication messages from said key server, wherein said received authentication messages comprise said encrypted content key and/or said public key.

10. The method according to claim 8, wherein said one of plurality of devices descrambles said scrambled content from said home gateway utilizing said recovered content key.

17. The system according to claim 6, wherein said one or more circuits are operable to receive authentication messages from said key server, wherein said received authentication messages comprise said public key.

11. A system for networking, the system comprising:

one or more circuits for use in a home gateway that enables communication with a plurality of devices, said one or more circuits being operable to;

recover a root-content key from a key server of a service provider for content requested by one of said plurality of devices;

generate a content key corresponding to said requested content, utilizing said recovered root-content key;

scramble said content utilizing said generated content key; and

communicate said scrambled content to said one of said plurality of devices.

12. The system according to claim 11, wherein said one or more circuits are operable to request said root-content key from said key server utilizing a signed key exchange protocol.

13. The system according to claim 12, wherein said one or more circuits are operable to receive key index of said root-content key from said key server subsequent to said requesting.

14. The system according to claim 13, wherein said one or more circuits are operable to recover said root-content key based on said received key index.

15. The system according to claim 14, wherein said one or more circuits are operable to generate said content key utilizing said recovered root-content key.

16. The system according to claim 15, wherein said one or more circuits are operable to encrypt said generated content key utilizing a public key from said key server;

and communicate said encrypted content key to said one of said plurality of devices.

18. The system according to claim 16, wherein said one of said plurality of devices recovers said generated content key by decrypting said encrypted content key from said home gateway utilizing a private key of said one of said plurality of devices.

19. The system according to claim 18, wherein said one of plurality of devices receives authentication messages from said key server, wherein said received authentication messages comprise said encrypted content key and/or said public key.

20. The system according to claim 18, wherein said one of plurality of devices descrambles said scrambled content from said home gateway utilizing said recovered content key.