System and method for remote reset of password and encryption key
View Patent ↗Data is secured on a device in communication with a remote location using a password and content protection key. The device stores data encrypted using a content protection key, which itself may be stored in encrypted form using the password and a key encryption key. The remote location receives a public key from the device. The remote location uses the public key and a stored private key to generate a further public key. The further public key is sent to the device. The device uses the further public key to generate a key encryption key, which is then used to decrypt the encrypted content protection key. A new content encryption key may then be created.
1. A non-transitory electronic device-readable medium bearing code which, when executed by at least one processor of an electronic device, causes the electronic device to:
receive a public key B=bP from a remote entity, wherein P is an elliptic curve point and b is a private key;
compute, at the electronic device, a public key D=dP, wherein d is a random value generated at the electronic device, and store D;
compute a key encryption key L=dB;
encrypt a content encryption key K using the key encryption key L to provide a first encrypted content encryption key, and store the first encrypted content encryption key at the electronic device;
subsequently recover the content encryption key K from the first encrypted content encryption key at the electronic device by:
generating a random value r and computing a public key D′=rD;
transmitting the public key D′ to the remote entity and receiving in response a public key L′=bD′; and
decrypting the first encrypted content protection key using a value for the key encryption key L calculated as r −1 L′, wherein r −1 is an inverse value of r.
2. The non-transitory electronic device-readable medium of claim 1 , wherein the code, when executed, further causes the electronic device to:
further encrypt the content encryption key K using a password to provide a second encrypted content encryption key, and store the second encrypted content encryption key at the electronic device; and
while the password is retained in volatile memory of the electronic device, use the password to decrypt the second encrypted content encryption key to obtain the content encryption key K for use in encrypting and decrypting data at the electronic device.
3. The non-transitory electronic device-readable medium of claim 2 , wherein the code, when executed, further causes the electronic device to receive a new password, generate a new content encryption key K′, and:
decrypt any data encrypted using the recovered content encryption key K;
encrypt the data thus decrypted using the new content encryption key K′; and
encrypt the new content encryption key K′.
4. The non-transitory electronic device-readable medium of claim 3 , wherein the new content encryption key K′ is encrypted using the key encryption key L.
5. The non-transitory electronic device-readable medium of claim 3 , wherein the new content encryption key K′ is encrypted using a new key encryption key M.
6. The non-transitory electronic device-readable medium of claim 5 , wherein the code, when executed, further causes the electronic device to:
receive a new public key B 1 =b 1 P 1 from the remote entity, wherein P 1 is an elliptic curve point and b 1 is a private key;
compute, at the electronic device, a new public key D 1 =d 1 P 1 , wherein d 1 is a random value generated at the electronic device, and storing D 1 ; and
compute the new key encryption key M=d 1 B 1 .
7. The non-transitory electronic device-readable medium of claim 1 , wherein encrypting the content encryption key K using the key encryption key L is carried out using an encryption method other than elliptic curve cryptography.
8. The non-transitory electronic device-readable medium of claim 2 , wherein encrypting the content encryption key K using the password is carried out using an encryption method other than elliptic curve cryptography.
9. The non-transitory electronic device-readable medium of claim 2 , wherein any data encrypted using the content encryption key K is encrypted using a key derived from the content encryption key K.
10. A non-transitory electronic device-readable medium bearing code which, when executed by at least one processor of an electronic device, causes the electronic device to:
receive a public key B=bP from a remote entity, wherein P is an elliptic curve point and b is a private key;
compute, at the electronic device, a public key D=dP, wherein d is a random value generated at the electronic device, and store D;
encrypt a password using a key encryption key L=dB to provide an encrypted password, and store the encrypted password at the electronic device;
subsequently recover the password from the encrypted password at the electronic device by:
generating a random value r and computing a public key D′=rD;
transmitting the public key D′ to the remote entity and receiving in response a public key L′=bD′; and
decrypting the encrypted password using a value for the key encryption key L calculated as r −1 L′, wherein r −1 is an inverse value of r.
11. The non-transitory electronic device-readable medium of claim 10 , wherein the code, when executed, further causes the electronic device to:
use the password to encrypt a content protection key K to provide an encrypted content protection key, the content protection key K being used to encrypt and decrypt data stored at the electronic device.
12. The non-transitory electronic device-readable medium of claim 11 , wherein the code, when executed, further causes the electronic device to receive a new password, generate a new content encryption key K′, and:
decrypt, using the password thus recovered, the encrypted content protection key;
decrypt any data encrypted using the content encryption key K obtained by decrypting the encrypted content protection key;
encrypt the data thus decrypted using the new content encryption key K′; and
encrypt the new content encryption key K′.
13. The non-transitory electronic device-readable medium of claim 12 , wherein the new content encryption key K′ is encrypted using the key encryption key L.
14. The non-transitory electronic device-readable medium of claim 12 , wherein the new content encryption key K′ is encrypted using a new key encryption key M.
15. The non-transitory electronic device-readable medium of claim 14 , wherein the code, when executed, further causes the electronic device to:
receive a new public key B 1 =b 1 P 1 from the remote entity, wherein P 1 is an elliptic curve point and b 1 is a private key;
compute, at the electronic device, a new public key D 1 =d 1 P 1 , wherein d 1 is a random value generated at the electronic device, and storing D 1 ; and
compute the new key encryption key M=d 1 B 1 .
16. The non-transitory electronic device-readable medium of claim 10 , wherein encrypting the password using the key encryption key L is carried out using an encryption method other than elliptic curve cryptography.
17. The non-transitory electronic device-readable medium of claim 11 , wherein encrypting the content encryption key K using the password is carried out using an encryption method other than elliptic curve cryptography.
18. A non-transitory electronic device-readable medium bearing code which, when executed by at least one processor of an electronic device, causes the electronic device to:
receive an instruction to reset a password at the electronic device, wherein the password is used at the electronic device to encrypt and decrypt a content encryption key K, the content encryption key K also being encrypted using a key encryption key L=dB, wherein d is a random value generated at the electronic device and B is a public key provided by a remote entity;
determine that the content encryption key K is not available in decrypted form;
transmit a public key D′=rD to a remote entity and receive in response a public key L′=bD′, wherein r is a random value generated at the electronic device, D is a public key equal to dP, wherein P is an elliptic curve point and b is a private key held by the remote entity, wherein B=bP;
compute r −1 L′, wherein r −1 is an inverse value of r; and
decrypt the content encryption key K encrypted by the key encryption key L using the computed r −1 L.
19. The non-transitory electronic device-readable medium of claim 18 , wherein the code, when executed, further causes the electronic device to, after decrypting the content encryption key K encrypted by the key encrypted key L using the computed r −1 L:
decrypt any data encrypted using the content encryption key K;
re-encrypt the data thus decrypted using a new content encryption key K′; and
encrypt the new content encryption key K′ using each of the computed r −1 L and a new password.
20. The non-transitory electronic device-readable medium of claim 18 , wherein the code, when executed, further causes the electronic device to, after decrypting the content encryption key K encrypted by the key encrypted key L using the computed r −1 L:
decrypt any data encrypted using the content encryption key K;
re-encrypt the data thus decrypted using a new content encryption key K′; and
encrypt the new content encryption key K′ using a new password; and
encrypt the new password using the computed r −1 L.