Unified broadcast encryption system
AssigneeInternational Business Machines Corporation
InventorsHongxia Jin, Jeffrey B. Lotspiech
Life of this patent
Estimating the term…
Abstract
A system and method is disclosed for performing unified broadcast encryption and traitor tracing for digital content. In one embodiment a media key tree is divided into S subtrees, the media key tree including media keys and initial values, which may be random values. The digital content is divided into a plurality of segments and at least some of the segments are converted into a plurality of variations. The random values are transformed into media key variations and a separate media key variant is assigned to each of the subdivided subtrees. A unified media key block including the media key tree is stored on the media.
Claims9
A method for a content protection licensing agency to generate keys for protected content that enables identification of a compromised media device, comprising:
- dividing a tree-based media key block into subtrees, said tree-based media key block comprising media key variants and initial values, wherein a particular media device is associated with one of said subtrees;
- assigning a separate media key variant to each of said subtrees;
- creating a key transformation program for media that comprises protected content, wherein said program:
- executes on a particular media device when said device attempts to decrypt said content, transforms initial values into media key variations, and identifies to said agency which subtree among said subtrees is associated with said particular media device;
- storing said key transformation program on media that comprises protected content;
- and
- tracing a compromised media device of said content by identifying a subdivided subtree used by the compromised media device to circumvent said content, wherein the subtree is calculated when performing said transformation of initial values, and revoking the compromised media device by removing said identified subdivided subtree from an associated subtree if said subdivided subtree is a leaf of said tree-based media key block.
A computer program product for a content protection licensing agency to generate keys for protected content that enables identification of a compromised media device, the computer program product comprising a non-transitory computer readable storage medium having computer program code embodied therewith, said program code being readable/executable by said device to:
- divide a tree-based media key block into subtrees, said tree-based media key block comprising media key variants and initial values, wherein a particular media device is associated with one of said subtrees;
- assign a separate media key variant to each of said subtrees;
- and
- create a key transformation program for media that comprises protected content, wherein said program:
- executes on a particular media device when said device attempts to decrypt said content, transforms initial values into media key variations, and identifies to said agency which subtree among said subtrees is associated with said particular media device;
- store said key transformation program on media that comprises protected content;
- and
- trace a compromised media device of said content by identifying a subdivided subtree used by the compromised media device to circumvent said content, wherein the subtree is calculated when performing said transformation of initial values, and revoke the compromised media device by removing said identified subdivided subtree from an associated subtree if said subdivided subtree is a leaf of said tree-based media key block.
A system for a content protection licensing agency to generate keys for protected content that enables identification of a compromised media device, the system comprising a non-transitory computer readable storage medium having computer program code embodied therewith, said program code being executable to:
- divide a tree-based media key block into subtrees, said tree-based media key block comprising media key variants and initial values, wherein a particular media device is associated with one of said subtrees;
- assign a separate media key variant to each of said subtrees;
- and
- create a key transformation program for media that comprises protected content, wherein said program:
- executes on a particular media device when said device attempts to decrypt said content, transforms initial values into media key variations, and identifies to said agency which subtree among said subtrees is associated with said particular media device;
- store said key transformation program on media that comprises protected content;
- and
- trace a compromised media device of said content by identifying a subdivided subtree used by the compromised media device to circumvent said content, wherein the subtree is calculated when performing said transformation of initial values, and revoke the compromised media device by removing said identified subdivided subtree from an associated subtree if said subdivided subtree is a leaf of said tree-based media key block.
Dependencies are inferred from the claim text.