Subset difference method for multi-cast rekeying
View Patent ↗An improved subset-difference method is provided. The improved method uses the value of a current content key to help generate the requisite difference keys. The requisite difference keys are then used to encrypt the next content key which will be delivered only to users who are supposed to remain in the group. Users who have the current content key are then able to generate the requisite difference keys which they can then use to decrypt the next content key. Using the decrypted next content key, the users are then able to continue to receive contents. Since previously revoked users do not have the current content key, they are unable to determine the next content key and thus are prevented from receiving future contents.
1. An improvement to a subset-difference method, the subset-difference method using a plurality of difference keys to encrypt a content key, each of the plurality of difference keys being generated by using a corresponding label, the improvement comprising:
generating during a first rekeying each of the plurality of difference keys L I,J by applying a one-way function G M to the corresponding current label, LABEL I,J and a first current content key, CK P ;
generating during a next rekeying each of the plurality of difference keys L I,J by applying a one-way function G M to the corresponding current label, LABEL I,J and the next current content key, CK P+1 ; and
wherein the next sequential content key, CK P+2 generated by applying a one-way function G M to the corresponding current label, LABEL I,J and content key, CK P+1 , is used to ensure continued delivery of contents.
2. The improvement of claim 1 wherein the improvement and the subset-difference method are implemented in a content delivery system that is capable of providing multicasting.
3. The improvement of claim 2 wherein the content delivery system includes a plurality of clients under the control of corresponding users, a key distribution center and a caching server; and
wherein the key distribution center delivers the corresponding labels that are used to respectively generate the plurality of difference keys to the plurality of clients and the caching server.
4. The improvement of claim 1 wherein the content key represents a program segment key;
wherein the current content key represents a current program segment key;
wherein the next content key represents a next program segment key; and
wherein the next program segment key is used to ensure continued delivery of a next program segment.
5. The improvement of claim 1 wherein the improvement and the subset-difference method are implemented using computer software.