Apparatus and method for a secure broadcast system

• US 8,718,279 B2
• Filed: 06/16/2004
• Issued: 05/06/2014
• Est. Priority Date: 07/08/2003
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Rose, Gregory Gordon, Semple, James, Quick, Roy Franklin
• Primary Examiner(s): Hailu, Teshome
• Application Number:
  US10/870,303
• Publication Number:
  US 20050010774A1
• Time in Patent Office: 3,611 Days
• Field of Search: 380/44
• US Class Current: 380/44
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

Apparatus and method for provisioning an access key used for a controlled access broadcast service is disclosed. In one aspect, a method for secure processing in a device that securely stores a secret key comprises receiving a plurality of challenges from a network, generating a plurality of ciphering keys based on the secret key and the plurality of challenges, and generating an access key based on the plurality of ciphering keys.

Claims

1. A method operational on a user terminal for secure processing in a device that securely stores a secret key, the user terminal in communication with a network that broadcasts to a plurality of user terminals, the method operational on the user terminal comprising:

receiving a plurality of random challenges from the network;

generating a plurality of ciphering keys based on the secret key and the plurality of random challenges;

generating an access key based on the plurality of ciphering keys;

generating a plurality of authentication responses using the plurality of random challenges and the secret key;

sending at least one authentication response, from the plurality of authentication responses, to the network; and

discarding any authentication responses, from the plurality of authentication responses, not sent to the network.

2. The method of claim 1, wherein receiving a plurality of challenges comprises:

receiving a plurality of random values.

3. The method of claim 1, wherein the access key is longer than a ciphering key.

4. The method of claim 3, wherein generating the access key comprises:

concatenating the plurality of ciphering keys.

5. The method of claim 3, wherein generating the access key comprises:

using a hash function on the plurality of ciphering keys.

6. The method of claim 5, wherein the hash function comprises SHA-1 to mix the plurality of ciphering keys.

7. The method of claim 1, wherein storing the secret key comprises:

storing a 128 bit subscriber authentication key as the secret key in a subscriber identity module of a mobile phone using Global System for Mobile communication standard.

8. The method of claim 7, wherein generating the plurality of ciphering keys comprises generating 64-bit ciphering keys;

and

wherein generating the access key comprises generating a 128 bit broadcast access key using two ciphering keys.

9. The method of claim 1, wherein storing the secret key comprises:

storing a 128 bit subscriber authentication key as the secret key in a universal subscriber identity module of a mobile phone using Universal Mobile Telecommunications System standard.

10. The method of claim 9, wherein generating the plurality of ciphering keys comprises generating 64-bit ciphering keys;

and

wherein generating the access key comprises generating a 128 bit broadcast access key using two ciphering keys.

11. The method of claim 1, wherein generating the access key comprises generating a broadcast access key;

and wherein the method further comprises;

receiving encrypted broadcast content; and

decrypting the broadcast content based on the broadcast access key.

12. The method of claim 11, wherein the decrypting the content comprises:

generating a temporary decryption key based on each random challenge and the broadcast access key; and

decrypting the broadcast content using the temporary decryption key.

32. The method of claim 1, wherein the network includes one or more content providers.

33. The method of claim 1, wherein the network broadcasts the plurality of random challenges to the plurality of user terminals in addition to the user terminal.

34. The method of claim 1, wherein the at least one authentication response sent to the network is a subset of the plurality of authentication responses.

13. Apparatus for use in a mobile phone, the apparatus in communication with a network that broadcasts to a plurality of user terminals, the apparatus comprising:

an integrated circuit card (ICC) configured to securely store a secret key and to generate a plurality of ciphering key based on the secret key and a plurality of random challenges received from the network;

a processor coupled to the ICC and configured to generate an access key based on the plurality of ciphering keys; and

a transmitter coupled to the ICC,

wherein the ICC uses the plurality of challenges and the secret key to generate a plurality of authentication responses, the transmitter is configured to send at least one authentication response, from the plurality of authentication responses, to the network, and the transmitter is configured to discard any authentication responses, from the plurality of authentication responses, not sent to the network.

14. The apparatus of claim 13, wherein the plurality of random challenges comprises a plurality of random values.

15. The apparatus of claim 13, wherein the ICC is a subscriber identity module (SIM) of a mobile phone using Global System for Mobile communication standard.

16. The apparatus of claim 15, wherein the SIM stores a 128 bit subscriber authentication key as the secret key and generates 64-bit ciphering keys;

and wherein the processor generates a 128 bit broadcast access key using two ciphering keys.

17. The apparatus of claim 13, wherein the ICC is a universal subscriber identity module (USIM) of a mobile phone using Universal Mobile Telecommunications System standard.

18. The apparatus of claim 17, wherein the USIM stores a 128 bit subscriber authentication key as the secret key and generates 64-bit ciphering keys;

and wherein the processor generates a 128 bit broadcast access key using two ciphering keys.

19. The apparatus of claim 13, wherein the receiver receives encrypted broadcast content;

and wherein the processor generates a broadcast access key to decrypt the broadcast content.

20. Apparatus for use in a mobile phone, the apparatus in communication with a network that broadcasts to a plurality of user terminals, the apparatus comprising:

means for receiving a plurality of random challenges from the network;

means for generating a plurality of ciphering keys based on the plurality of random challenges and the secret key;

means for generating an access key based on the plurality of ciphering keys;

means for generating a plurality of authentication responses using the plurality of challenges and the secret key;

means for sending at least one authentication response, from the plurality of authentication responses, to the network; and

means for discarding any authentication responses, from the plurality of authentication responses, not sent to the network.

21. The apparatus of claim 20, wherein the means for generating the access key comprises:

means for concatenating the plurality of ciphering keys.

22. The apparatus of claim 20, wherein the means for generating the access key comprises:

means for using a hash function on the plurality of ciphering keys.

23. The apparatus of claim 20, wherein the means for securely storing the secret key is a subscriber identity module (SIM) of a mobile phone using Global System for Mobile communication standard, and wherein the secret key is a subscriber authentication key.

24. The apparatus of claim 23, wherein the SIM stores a 128 bit subscriber authentication key and comprises means for generating 64-bit ciphering keys;

and

wherein the means for generating the access key comprises means for generating a 128 bit broadcast access key using two ciphering keys.

25. The apparatus of claim 20, wherein the means for securely storing the secret key is a universal subscriber identity module (USIM) of a mobile phone using Universal Mobile Telecommunications System standard, and wherein the secret key is a subscriber authentication key.

26. The apparatus of claim 25, wherein the USIM stores a 128 bit subscriber authentication key and comprises means for generating 64-bit ciphering keys;

and

wherein the means for generating the access key comprises means for generating a 128 bit broadcast access key using two ciphering keys.

27. The apparatus of claim 20, wherein the means for generating the access key generates a broadcast access key;

and wherein the apparatus further comprises;

means for receiving encrypted broadcast content; and

means for decrypting the broadcast content based on the broadcast access key.

28. A non-transitory machine readable medium for use in a device that securely stores a secret key, the device in communication with a network that broadcasts to a plurality of user terminals, the machine readable medium comprising:

codes for receiving a plurality of random challenges from the network;

codes for generating a plurality of ciphering keys based on the plurality of random challenges and the secret key;

codes for generating an access key based on the plurality of ciphering keys;

codes for generating a plurality of authentication responses using the plurality of challenges and the secret key;

codes for sending at least one authentication response, from the plurality of authentication responses, to the network; and

codes for discarding any authentication responses, from the plurality of authentication responses, not sent to the network.

29. The non-transitory machine readable medium of claim 28, wherein the codes for generating the access key comprises:

codes for concatenating the plurality of ciphering keys.

30. The non-transitory machine readable medium of claim 28, wherein the codes for generating the access key comprises:

codes for using a hash function on the plurality of ciphering keys.

31. The non-transitory machine readable medium of claim 28, wherein the device receives encrypted broadcast content, wherein the codes for generating the access key generates a broadcast access key;

and wherein the machine readable medium further comprises;

codes for decrypting the broadcast content based on the broadcast access key.