Secure group communications

A computer program product stored on a non-transitory computer-readable medium, for use with a computer configured to providing secure communication in a system including a group management device, at least one subgroup management device, and at least one receiving device, wherein at least one subgroup management device is associated with at least receiving device, the computer program product having computer-executable instructions for causing the computer to:

• establish a temporary secure communication path between the group management device and the at least one receiving device;
• generate a key chain corresponding to the at least one receiving device, wherein the key chain includes a predetermined number of keys and having each key related to at least another key by at least one inverse of a one-way function, wherein the predetermined number of keys is agreed upon by the group management device and the at least one receiving device;
• store the generated key chain at the group management device and the at least one receiving device;
• tear down the temporary secure communication path subsequent to the storing of the generated key chain;
• provide at least one key in the generated key chain to the at least one subgroup management device associated with the at least one receiving device;
• using the generated key chain, authenticate the at least one subgroup management device;
• and
• establish another secure communication path between the group management device and the at least one subgroup management device and the at least one subgroup management device and the at least one receiving device associated with the at least one subgroup management device.

A system for providing secure communication in a system including a group management device, at least one subgroup management device, and at least one receiving device, wherein at least one subgroup management device is associated with at least receiving device, comprising:

• a communication device configured to provide communication between the group management device, the at least one subgroup management device, and the at least one receiving device;
• a memory;
• and
• a processor coupled to the communication device and the memory and configured to
• cause the communication device to establish a temporary secure communication path between the group management device and the at least one receiving device;
• generate a key chain corresponding to the at least one receiving device, wherein the key chain includes a predetermined number of keys and having each key related to at least another key by at least one inverse of a one-way function, wherein the predetermined number of keys is agreed upon by the group management device and the at least one receiving device;
• store in memory the generated key chain at the group management device and the at least one receiving device;
• tear down the temporary secure communication path subsequent to the storing of the generated key chain;
• provide at least one key in the generated key chain to the at least one subgroup management device associated with the at least one receiving device;
• using the generated key chain, authenticate the at least one subgroup management device;
• and
• cause the communication device to establish another secure communication path between the group management device and the at least one subgroup management device and the at least one subgroup management device and the at least one receiving device associated with the at least one subgroup management device.