METHOD AND SYSTEM FOR A RECURSIVE SECURITY PROTOCOL FOR DIGITAL COPYRIGHT CONTROL

• US 20130227302A1
• Filed: 01/18/2013
• Published: 08/29/2013
• Est. Priority Date: 06/20/2002
• Status: Active Grant

• Current Assignee: Torus Ventures LLC (Jeffrey M. Gross)
• Original Assignee: Krimmeni Technologies LLC
• Inventors: Oxford, William V.
• Granted Patent: US 9,710,617 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Systems and methods are described which utilize a recursive security protocol for the protection of digital data. These may include encrypting a bit stream with a first encryption algorithm and associating a first decryption algorithm with the encrypted bit stream. The resulting bit stream may then be encrypted with a second encryption algorithm to yield a second bit stream. This second bit stream is then associated with a second decryption algorithm. This second bit stream can then be decrypted by an intended recipient using associated keys.

Claims

1. A system, comprising:

a target device, comprising;

a processor, and

hardware comprising a target unit specific key, wherein the target unit specific key cannot be read by software executing on the target device, and

wherein the target is configured to;

receive a first bit stream,

obtain a first decryption algorithm associated with the first bit stream,

obtain the target unit specific key, and

decrypt the first bit stream to yield a first decrypted bit stream, wherein the decryption of the first bit stream is done utilizing the first decryption algorithm associated with the first bit stream and the target unit specific key.

2. The system of claim 1, wherein the target unit specific key is associated with a serial number of the target unit at a server that provided the first bit stream.

3. The system of claim 1, wherein the target unit specific key is one of a set of keys

4. The system of claim 3, wherein the target unit specific key is the only one of the set of keys that can be read when the decryption of the first bit stream occurs.

5. The system of claim 1, wherein the target device further comprises decryption hardware, the decryption is performed by the decryption hardware, and the target unit specific key may only be accessed by the decryption hardware.

6. The system of claim 1, wherein the decryption of the first bit stream is done utilizing a key obtained from a server.

7. The system of claim 1, wherein the first decrypted bit stream comprises digital content.

8. A method for digital security, comprising:

receiving a first bit stream at a target device;

obtaining a first decryption algorithm associated with a first bit stream;

obtaining a target unit specific key stored in hardware on the target device, wherein the target unit specific key cannot be read by software executing on the target device; and

decrypting the first bit stream to yield a first decrypted bit stream, wherein the decryption of the first bit stream is done utilizing the first decryption algorithm associated with the first bit stream and the target unit specific key.

9. The method of claim 8, wherein the target unit specific key is associated with a serial number of the target unit at the server at a server that provided the first bit stream.

10. The method of claim 8, wherein the target unit specific key is one of a set of keys.

11. The method of claim 10, wherein the target unit specific key is the only one of the set of keys that can be read when the decryption of the first bit stream occurs.

12. The method of claim 8, wherein the decryption is performed by decryption hardware and the target unit specific key may only be accessed by the decryption hardware.

13. The method of claim 8, wherein the decryption of the first bit stream is done utilizing a key obtained from a server.

14. The method of claim 8, wherein the first decrypted bit stream comprises digital content.

15. A non-transitory computer readable medium, comprising instructions for:

receiving a first bit stream at a target device;

obtaining a first decryption algorithm associated with a first bit stream;

obtaining a target unit specific key stored in hardware on the target device, wherein the target unit specific key cannot be read by software executing on the target device; and

decrypting the first bit stream to yield a first decrypted bit stream, wherein the decryption of the first bit stream is done utilizing the first decryption algorithm associated with the first bit stream and the target unit specific key.

16. The computer readable medium of claim 15, wherein the target unit specific key is associated with a serial number of the target unit at a server that provided the first bit stream.

17. The computer readable medium of claim 15, wherein the target unit specific key is one of a set of keys.

18. The computer readable medium of claim 17, wherein the target unit specific key is the only one of the set of keys that can be read when the decryption of the first bit stream occurs.

19. The computer readable medium of claim 15, wherein the decryption is performed by decryption hardware and the target unit specific key may only be accessed by the decryption hardware.

20. The computer readable medium of claim 15, wherein the decryption of the first bit stream is done utilizing a key obtained from a server.

21. The computer readable medium of claim 15, wherein the first decrypted bit stream comprises digital content.