SYSTEM AND METHOD OF CREATING AND SENDING BROADCAST AND MULTICAST DATA

• US 20130121491A1
• Filed: 12/17/2012
• Published: 05/16/2013
• Est. Priority Date: 06/15/2007
• Status: Active Grant

• Current Assignee: KoolSpan, Inc.
• Original Assignee: KoolSpan, Inc.
• Inventors: FASCENDA, Anthony C., STURNIOLO, Emil
• Granted Patent: US 9,008,312 B2
• Time in Patent Office: Days
• US Class Current: 380/255
• CPC Class Codes: H04K 1/00 Secret communication
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds

Abstract

A method of encrypting broadcast and multicast data communicated between two or more parties, each party having knowledge of a shared key, is provided. The key is calculated using values, some of which are communicated between the parties, so that the shared key is not itself transferred. Avoiding the transfer of the key offers several advantages over existing encryption methods.

Claims

1. A system for creating a secure multicast session comprising:

a first device having access to a shared base session key configured to;

generate an Internet Group Management Protocol (IGMP) query;

encrypt the IGMP query to create a first ciphertext; and

transmit, to a second device having access to the shared base session key, the first ciphertext, wherein the second device is configured to decrypt the first ciphertext to yield the IGMP query and generate a multicast session key; and

a data network for facilitating communication between the first device and the second device.

2. The system of claim 1, wherein the second device is further configured to form an offset as a function of the shared base session key and the multicast session key.

3. The system of claim 2, wherein the second device is further configured to encrypt the offset to create a second ciphertext.

4. The system of claim 3, wherein the second device is further configured to transmit the second ciphertext across the communication link.

5. The system of claim 4, wherein the first device is further configured to decrypt the second ciphertext to yield the offset.

6. The system of claim 5, wherein the first device is further configured to form the multisession key as a function of the shared base session key and the offset.

7. The system of claim 6, wherein a multicast packet may be encrypted by either the first device or the second device using the multicast session key.

8. The system of claim 7, wherein each multicast packet may be decrypted by an authenticated party device having the same multicast session key.