Content management systems and methods using proxy reencryption
This disclosure relates to systems and methods for managing protected electronic content using proxy reencryption techniques. Rights management architectures are described that may, among other things, provide end-to-end protection of content keys from their point of origination at a content creator and/or content service to end user devices. Proxy reencryption techniques consistent with aspects of the disclosed embodiments may enable transformation of a ciphertext under one public key to a ciphertext containing the same plaintext under another public key. Consistent with embodiments disclosed herein, proxy reencryption processes may be implemented using indistinguishability obfuscation and puncturable public-key encryption schemes, functional encryption, and/or white box obfuscation techniques.
1. A method for managing protected content performed by a rights management system comprising a processor and a non-transitory computer-readable medium storing instructions that, when executed by the processor, cause the system to perform the method, the method comprising:
receiving, from a content service system, a protected reencryption program, an encrypted content key encrypted using a public encryption key of the content service system, and an identifier of a piece of content associated with the encrypted content key, the protected reencryption program comprising a protected private decryption key of the content service system;
receiving, from a user device, a license request message, the license request message comprising the identifier of the piece of content and a public encryption key of the user device;
generating a reencrypted content key using the protected reencryption program based on the encrypted content key and the public encryption key of the user device, wherein generating the reencrypted content key comprises:
decrypting the encrypted content key by the protected reencryption program to generate a content key, and
encrypting the content key using the public encryption key of the user device to generate the reencrypted content key,
wherein decrypting the encrypted content key to generate the content key and encrypting the content key to generate the reencrypted content key are performed without exposing plaintext of the content key to the rights management system outside the protected reencryption program during execution of the protected reencryption program;
generating a content license associated with the piece of content, the content license comprising the reencrypted content key; and
transmitting the content license to the user device.
2. The method of claim 1 , wherein the license request message further comprises a signed message.
3. The method of claim 2 , wherein the method further comprises:
prior to generating the reencrypted content key and the content license, verifying a signature of the signed message.
4. The method of claim 3 , wherein the signed message comprises a content request message issued by the user device to the content service signed by the content service.
5. The method of claim 3 , wherein verifying the signature of the signed message comprises verifying that the signed message has been signed by the content service system.
6. The method of claim 1 , wherein generating the reencrypted content key comprises generating the reencrypted content key without exposing the protected private decryption key of the content service system to the rights management system during execution of the protected reencryption program.
7. The method of claim 1 , wherein the protected reencryption program comprises an obfuscated program.
8. The method of claim 7 , wherein the protected reencryption program is obfuscated using indistinguishability obfuscation.
9. The method of claim 7 , wherein the protected reencryption program is obfuscated using whitebox cryptographic obfuscation.
10. The method of claim 1 , wherein the license further comprises one or more license terms relating to use of the piece of content.