System and method for multicasting IPSec protected communications

A device for decrypting an Internet Protocol Security (IPSec)-encrypted multicast communication, said device comprising:

• a processor;
• a memory;
• a receiver for receiving an Internet Protocol Security (IPSec)-encrypted multicast communication;
• a communication modification module executable by the processor for modifying the received multicast communication to appear as a unicast communication to an IPSec decryption module;
• and
• a decryption device for decrypting the modified communication using IPSec protocol decryption.

A machine-readable medium having program instructions stored thereon executable by a processing unit for performing the steps of:

• receiving an Internet Protocol Security (IPSec)-encrypted multicast communication at a device having IPSec decryption capabilities;
• modifying the received multicast communication to appear as a unicast communication to the IPSec decryption capabilities;
• and
• decrypting the modified communication using IPSec decryption capabilities.

A device for decrypting an Internet Protocol Security (IPSec)-encrypted multicast communication, said device comprising:

• means for receiving an Internet Protocol Security (IPSec)-encrypted multicast communication at a device having IPSec decryption capabilities;
• means for modifying the received multicast communication to appear as a unicast communication to the IPSec decryption capabilities;
• and
• means for decrypting the modified communication using IPSec decryption capabilities.

A method comprising:

• generating a key to be used to encrypt and decrypt data;
• placing the generated key into a markup language file;
• encrypting the markup language file;
• transmitting the encrypted markup language file to a receiver;
• and
• decrypting the encrypted markup language file at the receiver to determine the generated key.

A device for providing an encrypted key to a remote location, said device comprising:

• a processor;
• a memory;
• a key server for generating a key to be used to encrypt and decrypt data and for placing the generated key into a markup language file;
• an encryption device for encrypting the markup language file;
• a transmitter for transmitting the encrypted markup language file to a receiver;
• and
• a decryption device decrypting the encrypted markup language file at the receiver to determine the generated key.

A device for providing an encrypted key to a remote location, said device comprising:

• means for generating a key to be used to encrypt and decrypt data;
• means for placing the generated key into a markup language file;
• means for encrypting the markup language file;
• means for transmitting the encrypted markup language file to a receiver;
• and
• means for decrypting the encrypted markup language file at the receiver to determine the generated key.

A machine-readable medium having program instructions stored thereon executable by a processing unit for performing the steps of:

• generating a key to be used to encrypt and decrypt data;
• placing the generated key into a markup language file;
• encrypting the markup language file;
• transmitting the encrypted markup language file to a receiver;
• and
• decrypting the encrypted markup language file at the receiver to determine the generated key.

A method of broadcasting a secure multicast communication, said method comprising:

• assigning content to be delivered in various hierarchies in an IP multicast communication;
• assigning different encryption keys for each respective hierarchy of the IP multicast communication;
• encrypting the content in the various hierarchies in an IP multicast communication using respectively assigned encryption keys;
• transmitting the encryption keys for the various hierarchies of the IP multicast communication to respective receivers intended to receive respective encryption keys;
• transmitting the encrypted IP multicast communication to the receivers;
• decrypting the content in the various hierarchies of the IP multicast communication at only those receivers having the respective encryption keys for such content.

A device for broadcasting a secure multicast communication, said device comprising:

• means for assigning content to be delivered in various hierarchies in an IP multicast communication;
• means for assigning different encryption keys for each respective hierarchy of the IP multicast communication;
• means for encrypting the content in the various hierarchies in an IP multicast communication using respectively assigned encryption keys;
• means for transmitting the encryption keys for the various hierarchies of the IP multicast communication to respective receivers intended to receive respective encryption keys;
• means for transmitting the encrypted IP multicast communication to the receivers;
• means for decrypting the content in the various hierarchies of the IP multicast communication at only those receivers having the respective encryption keys for such content.