Key production system
View Patent ↗A key production system to determine a cryptographic key for a selected cryptoperiod being later than or equal to a cryptoperiod-A, and earlier than or equal to a different cryptoperiod-B, the system including a first receiver to receive a first key-component, associated with cryptoperiod-A, forming part of a first hash-chain progressing via a first one-way function, progressive key-components corresponding to later cryptoperiods, a second receiver to receive a second key-component, associated with cryptoperiod-B, forming part of a second hash-chain progressing via a second one-way function, progressive key-components corresponding to earlier cryptoperiods, first and second key-component determination modules to determine key-components in the first hash-chain and the second hash-chain, respectively, for the selected cryptoperiod, and a key determination module to determine the cryptographic key based on the key-components in the first and second hash chain for the selected cryptoperiod. Related methods and apparatus are also included.
1. A system to determine a decryption key for a cryptoperiod C selected from a plurality of cryptoperiods indexed i, the cryptoperiod C being equal to a cryptoperiod A or a cryptoperiod B or a cryptoperiod between the cryptoperiod A and the cryptoperiod B, the cryptoperiod A being different from the cryptoperiod B, the system comprising:
a physical computing device configured to:
receive a key-component A- 1 associated with the cryptoperiod A, the key-component A- 1 forming part of a first hash-chain having a plurality of Y-key-components Y i , the index i of Y i indicating which one of the plurality of cryptoperiods i is assigned to Y i , the Y-key-components progressing from Y i to Y i+1 away from a root via a one-way function f 1 , the plurality of Y-key-components assigned to the plurality of cryptoperiods i with progressive Y-key-components assigned to later cryptoperiods;
receive a key-component B- 2 associated with the cryptoperiod B, the key-component B- 2 forming part of a second hash-chain having a plurality of X-key-components X i , the index i of X i indicating which one of the plurality of cryptoperiods i is assigned to X i , the X-key-components progressing from X i to X i−1 away from a root via a one-way function f 2 , the plurality of X-key-components assigned to the same plurality of cryptoperiods i with progressive X-key-components assigned to earlier cryptoperiods;
determine a key component C- 1 in the first hash-chain for the cryptoperiod C;
determine a key-component C- 2 in the second hash-chain for the cryptoperiod C; and
determine the decryption key for the cryptoperiod C based on the key component C- 1 and the key component C- 2 ; and
a consumer device to decrypt content using the decryption key for the cryptoperiod C.
2. The system according to claim 1 , wherein the physical computing device is operative to determine the key-component C- 1 in the first hash-chain for the cryptoperiod C based on applying the one-way function f 1 , at least once, to the key component A- 1 .
3. The system according to claim 1 , wherein the physical computing device is operative to determine the key-component C- 2 in the second hash-chain for the cryptoperiod C based on applying the one-way function f 2 , at least once, to the key component B- 2 .
4. The system according to claim 1 , wherein the physical computing device is operative to determine the decryption key by performing a cryptographic hash function on the concatenation of the key-component C- 1 with the key component C- 2 .
5. The system according to claim 1 , wherein the one-way function f 1 is the same as the one-way function 12 .
6. A key component production system to determine cryptographic key components for use in determining a cryptographic key for a cryptoperiod C selected from a plurality of cryptoperiods, indexed i, the system comprising:
a physical computing device configured to:
determine a key-component C- 1 associated with the cryptoperiod C such that the key-component C- 1 forms part of a first hash-chain having a plurality of Y-key-components Y i , the index i of Y i indicating which one of the plurality of cryptoperiods i is assigned to Y i , the Y-key components progressing from Y i to Y i+1 away from a root via a one-way function f 1 , the plurality of Y-key-components assigned to the plurality of cryptoperiods i with progressive Y-key-components assigned to later cryptoperiods;
determine a key-component C- 2 associated with the cryptoperiod C such that the key-component C- 2 forms part of a second hash-chain having a plurality of X-key-components X i , the index i of X i indicating which one of the plurality of cryptoperiods i is assigned to X i , the X-key components progressing from X i to X i−1 away from the root via a one-way function f 2 , the plurality of X-key components assigned to the same plurality of cryptoperiods i with progressive X-key-components assigned to earlier cryptoperiods;
determine the cryptographic key for the cryptoperiod C based on the key-component C- 1 and the key-component C- 2 ; and
enable transfer of the key-component C- 1 and the key component C- 2 to a plurality of consumer devices for use in determination of the cryptographic key for the cryptoperiod C.
7. A method to determine a decryption key for a cryptoperiod C selected from a plurality of cryptoperiods indexed i, the cryptoperiod C being equal to a cryptoperiod A or a cryptoperiod B or a cryptoperiod between the cryptoperiod A and the cryptoperiod B, the cryptoperiod A being different from the cryptoperiod B, the method comprising
receiving, by a physical computing device, a key-component A- 1 associated with the cryptoperiod A, the key-component A- 1 forming part of a first hash-chain having a plurality of Y-key-components Y i , the index i of Y i indicating which one of the plurality of cryptoperiods i is assigned to Y i , the Y-key components progressing from Y i to Y i+1 away from a root via a one-way function f 1 , the plurality of Y-key-components assigned to the plurality of cryptoperiods i with progressive Y-key-components assigned to later cryptoperiods;
receiving, by the physical computing device, a key-component B- 2 associated with the cryptoperiod B, the key-component B 2 forming part of a second hash-chain having a plurality of X-key-components X i , the index i of X i indicating which one of the plurality of cryptoperiods i is assigned to X i , the X-key components progressing from X i to X i−1 away from a root via a one-way function f 2 , the plurality of X-key-components assigned to the plurality of cryptoperiods i with progressive ones of the X-key-components assigned to earlier cryptoperiods;
determining, by the physical computing device, a key-component C- 1 in the first hash-chain for the cryptoperiod C;
determining, by the physical computing device, a key component C- 2 in the second hash-chain for the cryptoperiod C; and
determining, by the physical computing device, the decryption key for the cryptoperiod C based on the key-component C- 1 and the key component C- 2 ; and
decrypting, by the physical computing device, content using the decryption key for the cryptoperiod C.
8. The method according to claim 7 , wherein the key-component C- 1 in the first hash chain for the cryptoperiod C is determined, by the physical computing device, based on applying the one-way function f 1 , at least once, to the key component A- 1 .
9. The method according to claim 7 , wherein the key-component C- 2 in the second hash-chain for the cryptoperiod C is determined, by the physical computing device, based on applying the one-way function C, at least once, to the key component B- 2 .
10. The method according to claim 7 , wherein the decryption key is determined, by the physical computing device, by performing a cryptographic hash function on the concatenation of the key-component C- 1 with the key component C- 2 .
11. The method according to claim 7 , wherein the one-way function f 1 is the same as the one-way function f 2 .
12. A key component production method to determine cryptographic key components for use in determining a cryptographic key for a cryptoperiod C selected from a plurality of cryptoperiods, indexed i, the method comprising:
determining, by a physical computing device, a key-component C- 1 associated with the cryptoperiod C such that the key-component C- 1 forms part of a first hash-chain having a plurality of Y-key-components Y i , the index i of Y i indicating which one of the plurality of cryptoperiods i is assigned to Y i , the Y-key-components progressing from Y i to Y i+i away from a root via a one-way function f 1 , the plurality of Y-key-components assigned to the plurality of cryptoperiods i with progressive Y-key-components assigned to later cryptoperiods;
determining, by the physical computing device, a key-component C- 2 associated with the cryptoperiod C such that the key-component C- 2 forms part of a second hash-chain having a plurality of X-key-components X i , the index i of X i indicating which one of the plurality of cryptoperiods i is assigned to X i , the X-key components progressing from X i to X i−1 away from the root via a one-way function f 2 , the plurality of X-key components assigned to the same plurality of cryptoperiods i with progressive X-key-components assigned to earlier cryptoperiods;
determining, by the physical computing device, the cryptographic key for the cryptoperiod C based on the key-component C- 1 and the key-component C- 2 ; and
enabling transfer, by the physical computing device, of the key-component C- 1 and the key component C- 2 to a plurality of consumer devices for use in determination of the cryptographic key for the selected cryptoperiod C.
13. A system to determine a decryption key for a cryptoperiod C selected from a plurality of cryptoperiods indexed i, the cryptoperiod C being equal to a cryptoperiod A or a cryptoperiod B or a cryptoperiod between the cryptoperiod A and the cryptoperiod B, the cryptoperiod A being different from the cryptoperiod B, the system comprising:
means for receiving a key-component A- 1 associated with the cryptoperiod A, the key-component A- 1 forming part of a first hash-chain having a plurality of Y-key-components Y i , the index i of Y i indicating which one of the plurality of cryptoperiods i is assigned to Y i , the Y-key-components progressing from Y i to Y i+1 away from a root via a one-way function f 1 , the plurality of Y-key-components assigned to the plurality of cryptoperiods i with progressive Y-key-components assigned to later cryptoperiods;
means for receiving a key-component B- 2 associated with the cryptoperiod B, the key-component B- 2 forming part of a second hash-chain having a plurality of X-key-components X i , the index i of X i indicating which one of the plurality of cryptoperiods i is assigned to X i , the X-key-components progressing from X i to X i−1 away from a root via a one-way function f 2 , the plurality of X-key-components assigned to the same plurality of cryptoperiods i with progressive X-key-components assigned to earlier cryptoperiods;
means for determining a key component C- 1 in the first hash-chain for the cryptoperiod C;
means for determining a key-component C- 2 in the second hash-chain for the cryptoperiod C;
means for determining the decryption key for the cryptoperiod C based on the key component C- 1 and the key component C- 2 ; and
means for decrypting content using the decryption key for the cryptoperiod C.
14. A key component production system to determine cryptographic key components for use in determining a cryptographic key for a cryptoperiod C selected from a plurality of cryptoperiods, indexed i, the system comprising:
means for determining a key-component C- 1 associated with the cryptoperiod C such that the key-component C- 1 forms part of a first hash-chain having a plurality of Y-key-components Y i , the index i of Y i indicating which one of the plurality of cryptoperiods i is assigned to Y i , the Y-key components progressing from Y i to Y i+1 away from a root via a one-way function f 1 , the plurality of Y-key-components assigned to the plurality of cryptoperiods i with progressive Y-key-components assigned to later cryptoperiods;
means for determining a key-component C- 2 associated with the cryptoperiod C such that the key-component C- 2 forms part of a second hash-chain having a plurality of X-key-components X i , the index i of X i indicating which one of the plurality of cryptoperiods i is assigned to X i , the X-key components progressing from X i to X i−1 away from the root via a one-way function f 2 , the plurality of X-key components assigned to the same plurality of cryptoperiods i with progressive X-key-components assigned to earlier cryptoperiods;
means for determining the cryptographic key for the cryptoperiod C based on the key-component C- 1 and the key-component C- 2 ; and
means for enabling transfer of the key-component C- 1 and the key component C- 2 to a plurality of consumer devices for use in determination of the cryptographic key for the cryptoperiod C.