Method and apparatus for security in a data processing system

• US 8,983,065 B2
• Filed: 02/28/2008
• Issued: 03/17/2015
• Est. Priority Date: 10/09/2001
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Leung, Nikolai Konrad, Hawkes, Philip Michael, Rose, Gregory Gordon
• Primary Examiner(s): CERVETTI, DAVID GARCIA
• Application Number:
  US12/039,661
• Publication Number:
  US 20080226073A1
• Time in Patent Office: 2,574 Days
• Field of Search: 713/160, 713/163, 380/44, 380/270
• US Class Current: 380/44
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services

Abstract

Method and apparatus for secure transmissions. Each user is provided a registration key. A long-time updated broadcast key is encrypted using the registration key and provided periodically to a user. A short-time updated key is encrypted using the broadcast key. The short-time key is available with each broadcast message, wherein sufficient information to calculate the short-time key is provided in an Internet protocol header preceding the broadcast content. Broadcasts are then encrypted using the short-time key, wherein the user decrypts the broadcast message using the short-time key.

Claims

1. A method for secure transmissions operational in a content server, the method comprising:

obtaining a short term key for a message for transmission;

obtaining an access key for the message, the access key having an access key identifier;

encrypting the message with the short term key;

forming a packet header comprising the access key identifier and a random value; and

transmitting the encrypted message with the packet header over a wireless transmitter.

2. The method of claim 1, wherein the random value is associated with the short term key.

3. The method of claim 1, wherein short term key is a function of the access key and the random value.

4. The method of claim 1, wherein the short term key has a short term key identifier that includes the access key identifier and the random value.

5. The method of claim 1, wherein the random value is a security parameter index value.

6. The method of claim 5, wherein the security parameter index value is a random number.

7. The method of claim 1, wherein the method is operational in a content server and the encrypted message with the packet header are transmitted to a mobile device.

8. The method of claim 1, wherein the transmission of the encrypted message and packet header is a wireless transmission.

9. A content server device comprising:

a transmitter; and

a processing circuit coupled to the transmitter and configured for secure transmissions, the processing circuit adapted to

obtain a short term key for a message for transmission;

obtain an access key for the message, the access key having an access key identifier;

encrypt the message with the short term key;

form a packet header comprising the access key identifier and a random value; and

transmit the encrypted message with the packet header.

10. The device of claim 9, wherein short term key is a function of the access key and the random value.

11. The device of claim 9, wherein the short term key has a short term key identifier that includes the access key identifier and the random value.

12. The device of claim 9, wherein the random value is a security parameter index value.

13. A secure transmission device, comprising:

means for obtaining a short term key for a message for transmission;

means for obtaining an access key for the message, the access key having an access key identifier;

means for encrypting the message with the short term key;

means for forming a packet header comprising the access key identifier and a random value; and

means for transmitting the encrypted message with the packet header.

14. The device of claim 13, wherein short term key is a function of the access key and the random value.

15. The device of claim 13, wherein the short term key has a short term key identifier that includes the access key identifier and the random value.

16. The device of claim 13, wherein the random value is a security parameter index value.

17. A non-transitory computer-readable storage medium including a program operational on a content server device for secure transmissions, which when executed by a processor causes the processor to:

obtain a short term key for a message for transmission;

obtain an access key for the message, the access key having an access key identifier;

encrypt the message with the short term key;

form a packet header comprising the access key identifier and a random value; and

transmit the encrypted message with the packet header.

18. The non-transitory computer-readable storage medium of claim 17, wherein short term key is a function of the access key and the random value.

19. A processing circuit for secure transmissions, comprising:

a transmission interface; and

a processor coupled to the transmission interface, the processor adapted to;

obtain a short term key for a message for transmission;

obtain an access key for the message, the access key having an access key identifier;

encrypt the message with the short term key;

form a packet header comprising the access key identifier and a random value; and

transmit the encrypted message with the packet header.

20. The processing circuit of claim 19, wherein short term key is a function of the access key and the random value.

21. A method operational in a wireless communication device for secure reception of a transmission, the method comprising:

receiving a transmission via a wireless receiver, the transmission including an access key identifier, a random value, and an encrypted content;

determining an access key based on the access key identifier;

generating a short term key based on the access key and the random value; and

decrypting the encrypted content in the transmission using the short term key.

22. The method of claim 21, wherein the access key identifier and the random value define a short term key identifier associated with the short term key.

23. The method of claim 21, wherein the method is operational in a mobile device and the transmission is a wireless transmission.

24. The method of claim 21, wherein the access key identifier and random value are part of a packet header for the transmission.

25. The method of claim 21, wherein the access key identifier and random value are specific to the transmission.

26. The method of claim 21, wherein generating a short term key includes encrypting the random value with the access key to recover the short term key.

27. A wireless communication device supporting a broadcast service, comprising:

a wireless receiver adapted to receive a transmission including an access key identifier, a random value, and an encrypted content;

a user identification processing unit adapted to recover a short term key for decrypting a broadcast message, the user identification unit including a processing circuit adapted to;

determine an access key based on the access key identifier;

generate a short term key based on the access key and the random value; and

a mobile equipment processing unit adapted to decrypt the encrypted content in the transmission using the short term key.

28. The device of claim 27, wherein the access key identifier and the random value define a short term key identifier associated with the short term key.

29. The device of claim 27, wherein the access key identifier and random value are part of a packet header for the transmission.

30. The device of claim 27, wherein the access key identifier and random value are specific to the transmission.

31. A wireless device for secure reception of a transmission, comprising:

means for receiving a transmission including an access key identifier, a random value, and an encrypted content;

means for determining an access key based on the access key identifier;

means for generating a short term key based on the access key and the random value; and

means for decrypting the encrypted content in the transmission using the short term key.

32. The device of claim 31, wherein the access key identifier and the random value define a short term key identifier associated with the short term key.

33. The device of claim 31, wherein the access key identifier and random value are part of a packet header for the transmission.

34. The device of claim 31, wherein the access key identifier and random value are specific to the transmission.

35. A non-transitory computer-readable storage medium including a program operational on a wireless device for secure reception of broadcasts, which when executed by a processor causes the processor to:

receive a transmission including an access key identifier, a random value, and an encrypted content;

determine an access key based on the access key identifier;

generate a short term key based on the access key and the random value; and

decrypt the encrypted content in the transmission using the short term key.

36. The non-transitory computer-readable storage medium including a program of claim 35, wherein the access key identifier and the random value define a short term key identifier associated with the short term key.

37. The non-transitory computer-readable storage medium including a program of claim 35, wherein the access key identifier and random value are specific to the transmission.

38. The non-transitory computer-readable storage medium including a program of claim 35, wherein generating a short term key includes encrypting the random value with the access key to recover the short term key.

39. A processing circuit for secure reception of broadcasts, comprising:

a receiver interface; and

a processor coupled to the receiver interface, the processor adapted to;

receive a transmission including an access key identifier, a random value, and an encrypted content;

determine an access key based on the access key identifier;

generate a short term key based on the access key and the random value; and

decrypt the encrypted content in the transmission using the short term key.

40. The processing circuit of claim 39, wherein the access key identifier and random value are specific to the transmission.