Secure layered encryption of data streams

An encryption computer system to control user access to streaming data over a network, the encryption computer system comprising computer-readable instructions stored in a non-transitory computer-readable storage medium comprising instructions for instructing a general-purpose processing unit to:

• a. receive from a key generator a first symmetric encryption key stream comprising a first plurality of symmetric encryption keys for encrypting respective sequential portions of a first data stream to create a first encrypted data stream comprising sequential portions of encrypted data;
• b. receive at least one public asymmetric encryption key;
• c. determine, for each public asymmetric encryption key of the at least one public asymmetric encryption key, whether the public asymmetric encryption key is associated with a permission to access the first data stream by consulting one or more values indicative of a right to access the first data stream;
• d. selectively generate asymmetrically encrypted key stream data by digitally encrypting the first symmetric encryption key stream using each one of the at least one public asymmetric encryption key determined to be associated with the permission to access the first data stream to create one or more asymmetrically encrypted first key streams, wherein each respective one of the one or more asymmetrically encrypted first key streams is encrypted with a respective one of the at least one public asymmetric encryption key, the asymmetrically encrypted key stream data comprising each of the one or more asymmetrically encrypted first key streams,
• wherein for each of the at least one public asymmetric encryption key, the encrypting the symmetric encryption key stream is performed selectively in response to a determination that the particular public asymmetric encryption key is associated with a permission to access the first data stream;
• and
• e. transmit the asymmetrically encrypted key stream data.