Storage Device and Method for Super-Distribution of Content Protected with a Localized Content Encyrption Key

A method for super-distribution of content, the method comprising:

• performing the following in a storage device having an interface through which the storage device can connect to and communicate with a host device, wherein the storage device stores a super-distribution key and a content encryption key:
• creating a super-distribution token by encrypting the content encryption key with a first encryption key and then encrypting a result of that encryption with the super-distribution key, wherein the super distribution token includes a reference to the first encryption key;
• and
• providing the encrypted content and the super-distribution token to the host device for storage in a target storage device, wherein the target storage device stores a plurality of encryption keys and uses the reference in the super distribution token to select one of the plurality of encryption keys to decrypt the content encryption key.

A storage device comprising:

• an interface through which the storage device can connect to and communicate with a host device;
• one or more memories storing content encrypted with a content encryption key, a plurality of additional encryption keys, and a super-distribution token, wherein the super-distribution token comprises the content encryption key encrypted with one of the plurality of additional encryption keys and then encrypted with a super-distribution key;
• and
• a controller in communication with the interface and the one or more memories, wherein the controller is operative to:
• provide the super-distribution token to a server via the host device, wherein the server is operative to generate an activation token from the super-distribution token by decrypting the super-distribution token with the super-distribution key, wherein the activation token contains the content encryption key encrypted with the one of the plurality of additional encryption keys and further contains a reference to the one of the plurality of additional encryption keys;
• receive the activation token from the server via the host device;
• select one of the additional keys based on the reference in the activation token;
• decrypt the content encryption key from the activation token using the selected one of the additional keys;
• and
• decrypt the encrypted content using the content encryption key.

A method for super-distribution of content, the method comprising:

• performing the following in a storage device having an interface through which the storage device can connect to and communicate with a host device, wherein the storage device stores content encrypted with a content encryption key, a plurality of additional encryption keys, and a super-distribution token, and wherein the super-distribution token comprises the content encryption key encrypted with one of the plurality of additional encryption keys and then encrypted with a super-distribution key:
• providing the super-distribution token to a server via the host device, wherein the server is operative to generate an activation token from the super-distribution token by decrypting the super-distribution token with the super-distribution key, and wherein the activation token contains the content encryption key encrypted with the one of the plurality of additional encryption keys and further contains a reference to the one of the plurality of additional encryption keys;
• receiving the activation token from the server via the host device;
• selecting one of the additional keys based on the reference in the activation token;
• decrypting the content encryption key from the activation token using the selected one of the additional keys;
• and
• decrypting the encrypted content using the content encryption key.