公开(公告)号：US20170085373A1

公开(公告)日：2017-03-23

申请号：US15140907

申请日：2016-04-28

申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION

发明人： Dulce B. Ponceleon

IPC分类号： H04L9/08 ,  H04L9/14

CPC分类号： H04L9/0816 ,  H04L9/0822 ,  H04L9/14 ,  H04L2209/601

摘要： Space-efficient key allocations in broadcast encryption systems are provided. In some embodiments, a key bundle is read. The key bundle includes a first cryptographic key, an associated first key identifier, and an associated first cryptographic function identifier. A plurality of encrypted keys is received. Each encrypted key has an associated identifier. A first encrypted key is selected from the plurality of encrypted keys such that the key identifier of the first encrypted is equivalent to the first key identifier. A first cryptographic function is determined corresponding to the first cryptographic function identifier. The first cryptographic function is applied to the first encrypted key using the first cryptographic key to obtain a first intermediate cryptographic key. A content cryptographic key is determined using the first intermediate cryptographic key. The content cryptographic key is adapted for decryption of encrypted content.

公开(公告)号：US20170054551A1

公开(公告)日：2017-02-23

申请号：US15340715

申请日：2016-11-01

申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION

发明人： John B. Geagan ,  Dulce B. Ponceleon

IPC分类号： H04L9/06 ,  H04L9/08

CPC分类号： H04L9/0618 ,  H04L9/0816 ,  H04L9/0836 ,  H04L9/3234 ,  H04L2209/24 ,  H04L2209/34 ,  H04L2209/601

摘要： Embodiments of the present invention relate to encryption key allocation with additional security elements to lessen vulnerability to certain attacks. In one embodiment, a method and computer program product is provided for broadcast encryption. A key bundle encoded in a non-transient machine-readable medium is received. The key bundle comprises a first cryptographic key and an associated first cryptographic function identifier. Encrypted content is received. A key block corresponding to a subset difference tree is received. A first cryptographic triple function corresponding to the first cryptographic function identifier is determined. The subset difference tree is traversed using the first cryptographic key and the first cryptographic triple function to obtain a content cryptographic key. The content cryptographic key is applied to the encrypted content to obtain decrypted content.

摘要翻译： 本发明的实施例涉及具有附加安全性元素的加密密钥分配，以减少对某些攻击的脆弱性。 在一个实施例中，提供了用于广播加密的方法和计算机程序产品。 接收在非瞬时机器可读介质中编码的密钥束。 密钥束包括第一加密密钥和相关联的第一加密功能标识符。 收到加密内容。 接收与子集差异树对应的关键块。 确定与第一加密功能标识符相对应的第一密码三重功能。 使用第一加密密钥和第一密码三重函数遍历子集差异树以获得内容加密密钥。 将内容加密密钥应用于加密内容以获得解密的内容。

公开(公告)号：US09363075B2

公开(公告)日：2016-06-07

申请号：US14057203

申请日：2013-10-18

申请人： International Business Machines Corporation

发明人： Dulce B. Ponceleon

IPC分类号： H04L9/00 ,  H04L9/08 ,  H04L9/14

CPC分类号： H04L9/0816 ,  H04L9/0822 ,  H04L9/14 ,  H04L2209/601

摘要： Space-efficient key allocations in broadcast encryption systems are provided. In some embodiments, a key bundle is read. The key bundle includes a first cryptographic key, an associated first key identifier, and an associated first cryptographic function identifier. Encrypted content is received. A plurality of encrypted keys is received. Each encrypted key has an associated identifier. A first encrypted key is selected from the plurality of encrypted keys such that the key identifier of the first encrypted is equivalent to the first key identifier. A first cryptographic function is determined corresponding to the first cryptographic function identifier. The first cryptographic function is applied to the first encrypted key using the first cryptographic key to obtain a first intermediate cryptographic key. A content cryptographic key is determined using the first intermediate cryptographic key. The content cryptographic key is applied to the encrypted content to obtain decrypted content.

摘要翻译： 提供广播加密系统中节省空间的密钥分配。 在一些实施例中，读取密钥束。 密钥束包括第一加密密钥，相关联的第一密钥标识符和相关联的第一加密功能标识符。 收到加密内容。 接收多个加密密钥。 每个加密密钥具有相关联的标识符。 从多个加密密钥中选择第一加密密钥，使得第一加密的密钥标识符等同于第一密钥标识符。 对应于第一密码功能标识符确定第一加密功能。 使用第一加密密钥将第一加密功能应用于第一加密密钥以获得第一中间加密密钥。 使用第一中间密码密钥确定内容加密密钥。 将内容加密密钥应用于加密内容以获得解密的内容。

公开(公告)号：US20150110274A1

公开(公告)日：2015-04-23

申请号：US14057741

申请日：2013-10-18

申请人： International Business Machines Corporation

发明人： Dulce B. Ponceleon ,  John Bernard Geagan, III

IPC分类号： H04L9/32 ,  H04L9/08

CPC分类号： H04L9/0822 ,  H04L9/0872 ,  H04L9/0891 ,  H04L2209/60

摘要： Embodiments of the present invention relate to time delayed release of previously distributed digital content. In one embodiment, a method of and computer program product for low-bandwidth time-embargoed content disclosure are provided. A first cryptographic key is received. Encrypted content is received, encoded in a computer readable medium. A correction value is received. A predetermined function is applied to the first cryptographic key and the correction value to determine a second cryptographic key. The second cryptographic key is applied to the encrypted content to obtain decrypted content.

摘要翻译： 本发明的实施例涉及先前分布的数字内容的时间延迟释放。 在一个实施例中，提供了一种用于低带宽时间禁止的内容公开的方法和计算机程序产品。 接收到第一密码密钥。 在计算机可读介质中接收加密的内容。 接收到校正值。 预定功能被应用于第一密码密钥和校正值以确定第二密码密钥。 将第二加密密钥应用于加密内容以获得解密的内容。