Source centric sanction server and methods for use therewith

1. A sanction server for cryptographic sanctioning of secure transmission of media content from a content source, via a caching server to at least one client device, the sanction server comprising:

a network interface that provides bidirectional data communication with the content source, the caching server and the at least one client device via at least one network, wherein the network interface receives proxy data from the content source that includes cryptographic parameters that are based on a scrambling control word used to scramble the media content, receives a request for the media content from the at least one client device, transmits the proxy data to the at least one client device and transmits notification data to the caching server;

a random number generator that generates the scrambling control word;

a source processing module, coupled to the random number generator, that generates the proxy data and cryptographic data based on the scrambling control word;

wherein the content source generates the cryptographic data and sends the cryptographic data and the scrambled media content to the caching server;

wherein the caching server forwards the cryptographic data and the scrambled media content to the at least one client device;

wherein the at least one client device generates the scrambling control word for descrambling the scrambled media content based on the proxy data and the cryptographic data; and

wherein the proxy data, the cryptographic data and the scrambling control word are generated in accordance with an asymmetrical public key cryptography algorithm.

2. The sanction server of claim 1 further comprises;

sanction processing module that generates, in response to the request for the media content, the notification data, wherein the notification data indicates the at least one client device and the media content.

3. The sanction server of claim 2 wherein the sanction processing module authenticates the request for the media content from the at least one client device based on certificate data from a signing authority.

4. The sanction server of claim 2 wherein the sanction processing module signs the proxy data and the notification data based on certificate data from a signing authority.

5. A method for cryptographic sanctioning of secure transmission of media content from a content source to at least one client device via a caching server, the method comprising:

receiving, at a sanction server, proxy data from the content source that includes cryptographic parameters that are based on a scrambling control word used to scramble the media content;

receiving, at the sanction server, a request for the media content from the at least one client device;

transmitting the proxy data from the sanction server to the at least one client device; and

transmitting notification data from the sanction server to the caching server;

generating the scrambling control word via a random number generator at the content source;

generating, via the content source, the proxy data and cryptographic data based on the scrambling control word;

wherein the content source generates the cryptographic data and sends the cryptographic data and the scrambled media content to the caching server;

wherein the caching server forwards the cryptographic data and the scrambled media content to the at least one client device;

wherein the at least one client device generates the scrambling control word for descrambling the scrambled media content based on the proxy data and the cryptographic data; and

wherein the proxy data, and the first cryptographic data and the scrambling word are generated in accordance with an asymmetrical public key cryptography algorithm.

6. The method of claim 5 further comprising;

generating, at the sanction server and in response to the request for the media content from the at least one client device, notification data that indicates the at least one client device and the media content; and

sending the notification data to the caching server via the at least one network.

7. The method of claim 5 further comprising:

receiving, at the sanction server, certificate data from a signing authority; and

authenticating, via the sanction server, the request for the media content from the at least one client device based on the certificate data.

8. The method of claim 5 further comprising:

receiving, at the sanction server, certificate data from a signing authority; and

signing, via the sanction server, the proxy data based on the certificate data.

9. The sanction server of claim 1 wherein the proxy data, and the first cryptographic data and the scrambling control word are generated in accordance with a Rivest, Shamir, Adelman (RSA) cryptography algorithm.

10. The sanction server of claim 1 wherein the proxy data, and the first cryptographic data and the scrambling control word are generated in accordance with an elliptic curve cryptography algorithm.

11. The method of claim 5 wherein the proxy data, and the first cryptographic data and the scrambling control word are generated in accordance with a Rivest, Shamir, Adelman (RSA) cryptography algorithm.

12. The method of claim 5 wherein the proxy data, and the first cryptographic data and the scrambling control word are generated in accordance with an elliptic curve cryptography algorithm.