Method and apparatus for security in a data processing system

A method for a remote station to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• generating the short-term key using the broadcast access key and the first number;
• extracting a packet of data from the encrypted packet of data using the short-term key;
• encrypting the broadcast access key to form an encrypted broadcast access key comprising:
• storing a root key in the secure memory storage unit, wherein the root key is associated with the secure memory storage unit;
• and
• wherein extracting the encrypted broadcast access key further comprises:
• decrypting the EBAK based on the root key stored in the secure memory storage unit;
• storing the encrypted broadcast access key in a secure memory storage unit;
• and
• extracting the encrypted broadcast access key (EBAK) from the secure memory storage unit wherein the mobile network is a Global System for mobile (GSM) network.

A method for a remote station to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• generating the short-term key using the broadcast access key and the first number;
• extracting a packet of data from the encrypted packet of data using the short-term key;
• encrypting the broadcast access key to form an encrypted broadcast access key;
• storing the encrypted broadcast access key in a secure memory storage unit;
• and
• extracting the encrypted broadcast access key (EBAK) from the secure memory storage unit comprising:
• receiving the encrypted broadcast access key and a second number and storing the encrypted broadcast access key and the second number in the secure memory storage unit.

A method for a remote station to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• generating the short-term key using the broadcast access key and the first number;
• extracting a packet of data from the encrypted packet of data using the short-term key;
• encrypting the broadcast access key to form an encrypted broadcast access key;
• storing the encrypted broadcast access key in a secure memory storage unit;
• and
• extracting the encrypted broadcast access key (EBAK) from the secure memory storage unit comprising:
• determining a Temporary Key (TK);
• storing the TK in the secure memory storage unit;
• and
• decrypting the EBAK using the TK to form the Broadcast Access Key (BAK).

A method for a remote station to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiving a broadcast access key for the broadcast service wherein receiving the broadcast access key comprises requesting the broadcast access key from a first server;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• generating the short-term key using the broadcast access key and the first number;
• and
• extracting a packet of data from the encrypted packet of data using the short-term key.

A method for a remote station to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data, wherein receiving the encrypted packet of data and the associated first number comprises receiving the associated first number with each encrypted packet of data;
• generating the short-term key using the broadcast access key and the first number;
• and
• extracting packet of data from the encrypted packet of data using the short-term key.

A method for a remote station to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data, wherein the first number is received with at least one encrypted packet of data;
• generating the short-term key using the broadcast access key and the first number;
• and
• extracting a packet of data from the encrypted packet of data using the short-term key.

A method for a remote station to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiving a broadcast access key for the broadcast service at the remote station comprising:
• receiving a broadcast access key expiration indicator wherein the broadcast access key expiration indicator identifies an expiration time of the broadcast access key;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• generating the short-term key using the broadcast access key and the first number, and
• extracting a packet of data from the encrypted packet of data using the short-term key.

A method for a remote station to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiving a broadcast access key for the broadcast service at the remote station comprising:
• authorizing the remote station to provide the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• generating the short-term key using the broadcast access key and the first number;
• and
• extracting a packet of data from the encrypted packet of data using the short-term key.

A method for a remote station to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• generating the short-term key using the broadcast access key and the first number;
• extracting a packet of data from the encrypted packet of data using the short-term key;
• and
• storing the broadcast access key in a secure memory storage unit,
• wherein receiving the broadcast access key comprises authorizing the secure memory storage unit to provide the short-term keys to the remote station, wherein the first server authorizes the secure memory storage unit.

A method for a remote station to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• generating the short-term key using the broadcast access key and the first number;
• extracting a packet of data from the encrypted packet of data using the short-term key;
• and
• storing the broadcast access key in a secure memory storage unit,
• wherein the secure memory storage unit is a User Identity Module (UIM) adapted for use in a wireless device supporting spread spectrum protocols.

A method for encryption key management in a communication system supporting broadcast services, comprising:

• generating a short-term key using a broadcast access key;
• encrypting a packet of data using the short-term key;
• broadcasting the encrypted packet of data;
• and
• sending the broadcast access key from a first server to a remote station comprising:
• generating the broadcast access key in a fourth server.

A method for encryption key management in a communication system supporting broadcast services, comprising:

• generating a short-term key using a broadcast access key;
• encrypting a packet of data using the short-term key;
• broadcasting the encrypted packet of data;
• sending the broadcast access key from a first server to a remote station;
• generating a first random value in the fourth server;
• and
• assigning the first random value to the broadcast access key in a fourth server.

A method for encryption key management in a communication system supporting broadcast services, comprising:

• generating a short-term key using a broadcast access key BAK;
• encrypting a packet of data using the short-term key;
• broadcasting the encrypted packet of data:
• and
• sending the broadcast access key from a first server to a remote station,
• wherein the first server stores details of BAK values provided to the secure memory storage unit, wherein the details are used for accounting.

A method for encryption key management in a communication system supporting broadcast services, comprising:

• generating a short-term key using a broadcast access key;
• encrypting a packet of data using the short-term key;
• broadcasting the encrypted packet of data;
• forming an Encrypted Broadcast Access Key (EBAK) from the broadcast access key at a first server;
• and
• transmitting the encrypted broadcast access key.

A method for encryption key management in a communication system supporting broadcast services, comprising:

• generating a short-term key using a broadcast access key;
• and
• encrypting a packet of data using the short-term key;
• broadcasting the encrypted packet of data,
• wherein generating the short-term key comprises:
• generating the short-term key using the broadcast access key and a first number at a second server;
• and
• determining a value of the first number at the second server, comprising determining at least part of the first number from a value not controlled by the second server.

A method for encryption key management in a communication system supporting broadcast services, comprising:

• generating a short-term key using a broadcast access key;
• encrypting a packet of data using the short-term key;
• broadcasting the encrypted packet of data and an associated first number, the broadcasting comprising:
• sending the first number with each encrypted packet of data.

A method for encryption key management in a communication system supporting broadcast services, comprising:

• generating a short-term key using a broadcast access key;
• encrypting a packet of data using the short-term key;
• broadcasting the encrypted packet of data and an associated first number, the broadcasting comprising:
• sending the first number with at least one encrypted packet of data;
• and
• sending at least one encrypted packet of data without the first number.

A remote station adapted to extract data from at least one encrypted packet of data provided by a broadcast server, comprising:

• receiver adapted for:
• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• generator adapted for generating the short-term key using the broadcast access key and the first number;
• means for extracting a packet of data from the encrypted packet of data using the short-term key;
• means for encrypting the broadcast access key to form an encrypted broadcast access key, wherein the secure memory storage unit is further adapted to store the encrypted broadcast access key;
• and
• means for extracting the encrypted broadcast access key (EBAK) from the secure memory storage unit, comprising:
• means for determining a Temporary Key (TK) comprising means for determining the TK associated with a second number stored in the secure memory storage unit;
• means for storing the TK in the secure memory storage unit;
• and
• means for decrypting the EBAK using the TK to form a Broadcast Access Key (BAK),
• wherein the means for determining the TK associated with the second number comprises:
• means for forming the TK from the second number and a second root key stored in the secure memory storage unit, wherein the second root key is uniquely associated with the secure memory storage unit.

A remote station adapted to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiver adapted for:
• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• wherein the receiver comprises a transmitter for requesting the broadcast access key from a first server;
• generator adapted for generating the short-term key using the broadcast access key and the first number;
• and
• means for extracting a packet of data from the encrypted packet of data using the short-term key.

A remote station adapted to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiver adapted for:
• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• wherein the receiver comprises means for receiving the first number with each encrypted packet of data;
• generator adapted for generating the short-term key using the broadcast access key and the first number;
• and
• means for extracting a packet of data from the encrypted packet of data using the short-term key.

A remote station adapted to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiver adapted for:
• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data wherein the first number is received with at least one encrypted packet of data;
• generator adapted for generating the short-term key using the broadcast access key and the first number;
• and
• means for extracting a packet of data from the encrypted packet of data using the short-term key.

A remote station adapted to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiver adapted for:
• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number:
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• receiving a broadcast access key expiration indicator, wherein the broadcast access key expiration indicator identifies an expiration time of the broadcast access key;
• generator adapted for generating the short-term key using the broadcast access key and the first number;
• and
• means for extracting a packet of data from the encrypted packet of data using the short-term key.

A remote station adapted to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiver adapted for:
• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• authorizing the remote station to provide the broadcast service;
• generator adapted for generating the short-term key using the broadcast access key and the first number;
• and
• means for extracting a packet of data from the encrypted packet of data using the short-term key.

A remote station adapted to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiver adapted for:
• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• generator adapted for generating the short-term key using the broadcast access key and the first number;
• means for extracting a packet of data from the encrypted packet of data using the short-term key;
• and
• secure memory storage unit for storing the broadcast access key,
• wherein the receiver for receiving the broadcast access key is further adapted for:
• authorizing the secure memory storage unit to provide the short-term keys to the remote station, wherein the first server authorizes the secure memory storage unit.

A remote station adapted to extract data from at least one encrypted packet of data provided by a broadcast service, comprising:

• receiver adapted for:
• receiving a broadcast access key for the broadcast service;
• receiving an encrypted packet of data from a plurality of encrypted packets of data, wherein the each encrypted packet of data is associated with one short-term key from a plurality of short-term keys, wherein each short-term key is associated with a first number;
• receiving the first number corresponding to the short-term key associated with the encrypted packet of data;
• generator adapted for generating the short-term key using the broadcast access key and the first number;
• means for extracting a packet of data from the encrypted packet of data using the short-term key;
• and
• secure memory storage unit for storing the broadcast access key, wherein the secure memory storage unit is a User Identity Module (UIM) adapted for use in a wireless device supporting spread spectrum protocols.