Fast multicast messaging encryption and authentication

Patent metadata

Field	Value
Publication number	US-10171479-B2
Application number	US-201715839086-A
Country	US
Kind code	B2
Filing date	Dec 12, 2017
Priority date	Oct 14, 2015
Publication date	Jan 1, 2019
Grant date	Jan 1, 2019

Abstract

To prevent legitimate message recipients from forging new messages and to encrypt messages for a specific set of recipients (channel), a root key is encrypted and combined with a base session management key to render a combined root key, which in turn is encrypted with a public key of at least one recipient device to render a session management key. The public key of each of “N” intended recipient device encrypts the combined root key to render “N” session management keys. The session management keys are then combined with the combined root key to render a multicast root key, which is signed with a private key of a sending device. The signed multicast root key is combined with the session management keys to render an encrypted, signed multicast root key that is used to encrypt digital information prior to transmitting the digital information.

First claim

What is claimed is:

1. A sender device comprising:
at least one computer memory that is not a transitory signal and that comprises instructions executable by at least one processor to:
access a first key;
encrypt the first key with a second key to render an encrypted key;
encrypt the encrypted key with a key of at least a first recipient device to render a first device key (FDK);
concatenate the first FDK and the encrypted key to render a concatenation;
sign the concatenation to render a signed concatenation; and
distribute the signed concatenation to at least the first receiver for use in securely exchanging digital information at least in part by using the sender device to transmit the signed concatenation to the first receiver.

2. The sender device of claim 1 , wherein N recipient devices are intended to receive the digital information, and N FDKs are rendered by encrypting the second key once with each respective one of N keys of the respective N recipient devices, the N FDKs being combined with the encrypted key to render the concatenation.

3. The sender device of claim 1 , comprising the at least one processor coupled to the at least one computer memory.

4. The sender device of claim 1 , wherein the second key is derived from a pseudorandom number.

5. The sender device of claim 1 , wherein the concatenation further includes an initialization vector (IV).

6. The sender device of claim 1 , wherein the instructions are executable to:
send a message encrypted at least in part using the first key to render an encrypted message.

7. The sender device of claim 6 , wherein the instructions are executable to:
encrypt the message using a multicast (MC) session key, the MC session key being derived from a pseudorandom message key offset and the first key and being different from the second key.

8. The sender device of claim 7 , wherein the message key offset is XORed with the first key to establish the MC session key.

9. The sender device of claim 6 , wherein the instructions are executable to:
generate a message header including at least the message key offset and a message initialization vector (IV);
combine a private key-based signature of the sender device with the message header to render a signed header;
concatenate the encrypted message with the signed header; and
send the encrypted message with the signed header.

10. A receiver device comprising:
at least one computer memory that is not a transitory signal and that comprises instructions executable by at least one processor to:
receive a first concatenation;
parse through elements of the first concatenation to extract an encrypted first device key unique to the receiver device;
decrypt the encrypted first device key using a key of the receiver device to render a decrypted first device key;
use the decrypted first key to decrypt an encrypted multicast second in the first concatenation to render a decrypted second key; and
use the decrypted second key to process at least one message.

11. The receiver device of claim 10 , wherein the instructions are executable to:
access a public key of a sender device from which the concatenation is received;
validate a signature of the concatenation using the public key;
responsive to the signature being valid, parse through elements of the concatenation to extract the encrypted second key; and
responsive to the signature not being valid, not parsing through elements of the concatenation to extract the encrypted second key.

12. The receiver device of claim 10 , comprising the at least one processor coupled to the at least one computer memory.

13. The receiver device of claim 10 , wherein the instructions are executable to:
receive an encrypted message with a header;
extract a multicast (MC) session key using the decrypted second key and a message key offset in the header, the MC session key being different from the session management key; and
decrypt the encrypted message using the MC session key.

14. The receiver device of claim 13 , wherein the instructions are executable to:
validate a signature of the header using the public key of the sender device;
responsive to the signature of the header being valid, extract the MC session key using the decrypted second key and the message key offset in the header; and
responsive to the signature not being valid, not extract the MC session key using the decrypted second key and the message key offset in the header.

15. A computerized method comprising:
asymmetrically encrypting a second key with each of “N” keys of “N” recipient devices with to render “N” respective device second keys in which each device second key is the product of encrypting the second key with a public key;
symmetrically encrypting a multicast (MC) first key with the second key to render an encrypted MC first key;
generating a concatenation containing at least the encrypted MC first key and the N second keys;
distributing the concatenation to the recipient devices;
symmetrically encrypting a message using a MC session key to render an encrypted message, the MC session key being derived from the MC first key and a pseudorandom element and being different from the MC first key and the concatenation; and
sending the encrypted message with a message header, the message header including at least the pseudorandom element used in deriving the MC session key.

16. The method of claim 15 , comprising signing the concatenation using a private key.

17. The method of claim 15 , comprising signing the header using the private key.

18. The method of claim 15 , wherein the header includes at least a message session identification.

19. The method of claim 15 , wherein the header includes at least a message initialization vector (IV).

20. The method of claim 15 , comprising broadcasting the message to the N recipient devices and to an Nth+1 recipient device with a public key not used to render one of the device second keys, such that the Nth+1 recipient device cannot decrypt the message.

Assignees

• Sony Interactive Entertainment America Llc

Inventors

• Cotta Bryan

Classifications

• H04L63/123 Primary

  received data contents, e.g. message integrity · CPC title

• H04L2463/062

  applying encryption of the keys · CPC title

• H04L2209/601

  Broadcast encryption · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/0833

  involving conference or group key (network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065) · CPC title