Controlling delivery of broadcast encryption content for a network cluster from a content server outside the cluster
View Patent ↗Controlling delivery of broadcast encryption content for a network cluster from a content server outside the cluster that include receiving in the content server from the network device a key management block for the cluster, a unique data token for the cluster, and an encrypted cluster id and calculating a binding key for the cluster in dependence upon the key management block for the cluster, the unique data token for the cluster, and the encrypted cluster id. In typical embodiments, calculating a binding key includes calculating a management key from the key management block for the cluster; calculating a content server device key from the management key and the content server device id; decrypting the encrypted cluster id with the content server device key; and calculating the binding key with the management key, the unique data token for the cluster, and the cluster id.
1. A method for controlling the delivery of broadcast encryption content for a network cluster from a content server outside the cluster, the method comprising:
receiving in the content server from a network device a key management block for the cluster, a unique data token for the cluster, and a encrypted cluster id; and
calculating a binding key for the cluster in dependence upon the key management block for the cluster, the unique data token for the cluster, and the encrypted cluster id, wherein calculating a binding key further comprises:
calculating a management key from the key management block for the cluster;
calculating a content server device key from the management key and the content server device id, wherein calculating the content server device key further comprises hashing, with a one way cryptographic hash algorithm, the management key and the content server device id;
decrypting the encrypted cluster id with the content server device key; and
calculating the binding key with the management key, the unique data token for the cluster, and the cluster id, wherein calculating the binding key with the management key, the unique data token for the cluster, and the cluster id further comprises hashing, with a one way cryptographic hashing algorithm, the management key, the unique data token for the cluster, and the cluster id;
and wherein the method further comprises:
encrypting the content for the cluster with a title key;
encrypting the title key with the binding key; and
packaging the encrypted title key with the encrypted content for the cluster;
receiving in the network device a content server device id;
encrypting in the network device a cluster id in dependence upon a content server device id for the content server including:
calculating a content server device key, wherein calculating a content server device key further comprises hashing, with a one way hash algorithm, the management key and the content server device id; and
encrypting the cluster id with the content server device key.