Controlling delivery of broadcast encryption content for a network cluster from a content server outside the cluster

A computer program product for controlling the delivery of broadcast encryption content for a network cluster from a content server outside the cluster, the computer program product comprising:

• a recording medium;
• means, recorded on the recording medium, for receiving in the content server from a network device a key management block for the cluster, a unique data token for the cluster, and a encrypted cluster id;
• and
• means, recorded on the recording medium, for calculating a binding key for the cluster in dependence upon the key management block for the cluster, the unique data token for the cluster, and the encrypted cluster id, wherein calculating a binding key further comprises:
• means, recorded on the recording medium, for calculating a management key from the key management block for the cluster;
• means, recorded on the recording medium, for calculating a content server device key from the management key and the content server device id, wherein wherein means, recorded on the recording medium, for calculating a content server device key further comprises means, recorded on the recording medium, for hashing, with a one way cryptographic hash algorithm, the management key and the content server device id;
• means, recorded on the recording medium, for encrypting the encrypted cluster id with the content server device key;
• and
• means, recorded on the recording medium, for calculating the binding key with the management key, the unique data token for the cluster, and the cluster id, wherein wherein means, recorded on the recording medium, for calculating the binding key with the management key, the unique data token for the cluster, and the cluster id further comprises means, recorded on the recording medium, for hashing, with a one way cryptographic hashing algorithm, the management key, the unique data token for the cluster, and the cluster id;
• and wherein the system further comprises:
• means. recorded on the recording medium, for encrypting the content for the cluster with a title key;
• means, recorded on the recording medium, for encrypting the title key with the binding key;
• means, recorded on the recording medium, for packaging the encrypted title key with the encrypted content for the cluster;
• means, recorded on the recording medium, for receiving in the network device a content server device id;
• and
• means, recorded on the recording medium, for encrypting in the network device a cluster id in dependence upon a content server device id for the content server including:
• means, recorded on the recording medium, for calculating a content server device key, wherein means, recorded on the recording medium, for calculating a content server device key further comprises means, recorded on the recording medium, for hashing, with a one way hash algorithm, the management key and the content server device id;
• and
• means, recorded on the recording medium, for encrypting the cluster id with the content server device key.