Method and system for distributing cryptographic keys in a hierarchized network

A method for distributing cryptographic keys in a hierarchized network comprising at least one device responsible for a first group of devices, the method being applied by a device of the first group of devices also responsible for a second group of devices lower than the first group of devices, comprising the steps of:

• storing an identifier that is specific to the at least one device responsible for the first group of devices and is unique in the hierarchized system,
• storing a root cryptographic key, derived by the at least one device responsible for the first group of devices from a root cryptographic key of the at least one device responsible for the first group of devices and from the identifier specific to the at least one device responsible for the first group of devices,
• storing a set of identifiers specific to the second group of devices,
• generating at least one transport cryptographic key by derivation from the root cryptographic key and from one of the identifiers of the set of identifiers specific to the second group of devices, and
• distributing the at least one transport cryptographic key to devices that are members of the second group of devices.

A system for distributing cryptographic keys in a hierarchized network comprising at least one device responsible for a first group of devices, and at least one device of the first group of devices also being responsible for a second group of devices lower than the first group of devices, the system comprising:

• each of the first and second group of devices, a set of identifiers that is specific thereto, and, for each device responsible for the first and second a group of devices, a responsible-device identifier that is specific thereto and unique in the hierarchized network;
• at least one storage module for the at least one device of the first group of devices also being responsible for the second group of devices;
• a root cryptographic key in the at least one device responsible for the first group of devices;
• a root cryptographic key supplied to each device responsible for the second group of devices by derivation from the root cryptographic key of the at least one device responsible for the first group of devices and from the identifier of the at least one device of the first group of devices also responsible for the second group of devices by a first, nonreversible cryptographic function;
• and
• for each group of devices, at least one transport cryptographic key supplied to each member of the each group of devices by derivation from the root cryptographic key of a device responsible for the each group of devices and from an identifier belonging to a set of identifiers of the each group of devices by a second, nonreversible cryptographic function.

A device responsible for a first group of devices in a hierarchized network, comprising:

• storage for a root cryptographic key,
• storage for a first identifier that is specific to the first group of devices and is unique in the hierarchized network and of a set of identifiers specific to the first group of devices, and of at least one second identifier of a device responsible for a second group of device lower than the first group of devices, the device responsible for the second group of devices also belonging to the first group of devices,
• a transport cryptographic key obtained by derivation from the root cryptographic key and from one of the set of identifiers specific to the first group of devices,
• a root key derived from the root cryptographic key and from the at least one second identifier of the device responsible for the second group of devices.