Content protection for OMA broadcast smartcard profiles

A non-transitory computer-readable medium storing computer executable instructions configured to, when executed, cause a processor to:

• decrypt a content item to produce decrypted content;
• generate a random number;
• generate a content encryption key request message including the random number and a service encryption key identifier;
• transmit the content encryption key request message to a smartcard when the processor is coupled to the smartcard to cause the smartcard to respond with a content encryption key that is generated with a key derivation function having as parameters an identification of a subscriber, a service encryption key identified with the service encryption key identifier and the random number, wherein the key derivation function is usable in general bootstrapping architecture, and wherein the identification of the subscriber includes an international mobile subscriber identity assigned to the subscriber;
• receive a content encryption key response message from the smartcard coupled to the processor, the content encryption key response message including the random number and the content encryption key;
• and
• encrypt the decrypted content using the content encryption key.

An apparatus, comprising:

• a processor;
• and
• a memory storing computer executable instructions configured to, when executed, cause the apparatus to:
• decrypt a content item to produce decrypted content;
• generate a random number;
• generate a content encryption key request message including the random number and a service encryption key identifier;
• transmit the content encryption key request message to a smartcard coupled to the processor to cause the smartcard to respond with a content encryption key that is generated with a key derivation function having as parameters an identification of a subscriber, a service encryption key identified with the service encryption key identifier and the random number, wherein the key derivation function is usable in general bootstrapping architecture, and wherein the identification of the subscriber includes an international mobile subscriber identity assigned to the subscriber;
• and
• receive a content encryption key response message from the smartcard coupled to the processor, the content encryption key response message including the random number and the content encryption key;
• and
• encrypt the decrypted content using the content encryption key.

A method, comprising:

• receiving, at a module including a memory, a content encryption key request message from a computing device, the content encryption key request message including a random number and a service encryption key identifier, wherein the module is coupled to a processor of the computing device;
• in response to receipt of the content encryption key request message, generating a content encryption key at the module with a key derivation function having as parameters an identification of a subscriber, a service encryption key identified with the service encryption key identifier and the random number, wherein the key derivation function is usable in general bootstrapping architecture, and wherein the identification of the subscriber includes an international mobile subscriber identity assigned to the subscriber;
• transmitting a content encryption key response message from the module to the computing device, the content encryption response message including the content encryption key and the random number;
• receiving, at the module coupled to the processor of the computing device, one or more additional content encryption key request messages, each of the one or more additional content encryption key request messages including the random number and the service encryption key identifier;
• and
• in response to receiving each of the one or more additional content encryption key request messages, regenerating the content encryption key at the module based on the random number and the service encryption key identifier.

A non-transitory computer-readable medium storing computer executable instructions configured to, when executed, cause an apparatus to:

• receive a content encryption key request message from a computing device, the content encryption key request message including a random number generated by the computing device and a service encryption key identifier, wherein the apparatus is coupled to a processor of the computing device;
• in response to receipt of the content encryption key request message, generate a content encryption key with a key derivation function having as parameters an identification of a subscriber, a service encryption key identified with the service encryption key identifier and the random number, wherein the key derivation function is usable in general bootstrapping architecture, and wherein the identification of the subscriber includes an international mobile subscriber identity assigned to the subscriber;
• transmit a content encryption key response message to the computing device, the content encryption response message including the content encryption key and the random number;
• receive one or more additional content encryption key request messages from the computing device, each of the one or more additional content encryption key request messages including the random number and the service encryption key identifier;
• and
• in response to receiving each of the one or more additional content encryption key request messages, regenerating the content encryption key based on the random number and the service encryption key identifier.

An apparatus, comprising:

• a processor;
• and
• a memory storing computer executable instructions that, when executed, cause the apparatus to:
• receive a content encryption key request message from a computing device, the content encryption key request message including a random number generated by the computing device and a service encryption key identifier, wherein the apparatus is coupled to a processor of the computing device;
• in response to receipt of the content encryption key request message, generate a content encryption key with a key derivation function having as parameters an identification of a subscriber, a service encryption key identified with the service encryption key identifier and the random number, wherein the key derivation function is usable in general bootstrapping architecture, and wherein the identification of the subscriber includes an international mobile subscriber identity assigned to the subscriber;
• transmit a content encryption key response message to the computing device, the content encryption response message including the content encryption key and the random number;
• receive one or more additional content encryption key request messages from the computing device, each of the one or more additional content encryption key request messages including the random number and the service encryption key identifier;
• and
• in response to receiving each of the one or more additional content encryption key request messages, regenerate the content encryption key based on the random number and the service encryption key identifier.