WO2001003365A8 - Distributed group key management scheme for secure many-to-many communication - Google Patents

Distributed group key management scheme for secure many-to-many communication

Info

Publication number
WO2001003365A8
WO2001003365A8 PCT/US2000/018583 US0018583W WO0103365A8 WO 2001003365 A8 WO2001003365 A8 WO 2001003365A8 US 0018583 W US0018583 W US 0018583W WO 0103365 A8 WO0103365 A8 WO 0103365A8
Authority
WO
WIPO (PCT)
Prior art keywords
key
many
members
key management
group key
Prior art date
Application number
PCT/US2000/018583
Other languages
French (fr)
Other versions
WO2001003365A1 (en
Inventor
Lakshminath R Dondeti
Sarit Mukherjee
Ashok Samal
Original Assignee
Matsushita Electric Ind Co Ltd
Lakshminath R Dondeti
Sarit Mukherjee
Ashok Samal
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Matsushita Electric Ind Co Ltd, Lakshminath R Dondeti, Sarit Mukherjee, Ashok Samal filed Critical Matsushita Electric Ind Co Ltd
Priority to DE60028972T priority Critical patent/DE60028972T2/en
Priority to JP2001508107A priority patent/JP2003503950A/en
Priority to EP00947097A priority patent/EP1192751B1/en
Publication of WO2001003365A1 publication Critical patent/WO2001003365A1/en
Publication of WO2001003365A8 publication Critical patent/WO2001003365A8/en

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0891Revocation or update of secret information, e.g. encryption key update or rekeying
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3829Payment protocols; Details thereof insuring higher security of transaction involving key management
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/02Details
    • H04L12/16Arrangements for providing special services to substations
    • H04L12/18Arrangements for providing special services to substations for broadcast or conference, e.g. multicast
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0442Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/06Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/062Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
    • H04L63/064Hierarchical key distribution, e.g. by multi-tier trusted parties
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/06Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/065Network architectures or network communication protocols for network security for supporting key management in a packet data network for group communications
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823Network architectures or network communication protocols for network security for authentication of entities using certificates
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/10Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/104Grouping of entities
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0822Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/083Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
    • H04L9/0833Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key
    • H04L9/0836Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key using tree structure or hierarchical structure
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/04Masking or blinding
    • H04L2209/046Masking or blinding of operations, operands or results of the operations

Abstract

A group key management system (20) and method for providing secure many-to-many communication is presented. The system (20) employs a binary distribution tree structure (26). The binary tree (26) includes a first internal node having a first branch and a second branch depending therefrom. Each of the branches includes a first member (22, 22a) assigned to a corresponding leaf node. The first member (22, 22a) has a unique binary ID (24) that is associated with the corresponding leaf node to which the first member (22, 22a) is assigned. A first secret key (28) of the first member (22, 22a) is operable for encrypting data to be sent to other members (22, 22a). The first member (22, 22a) is associated with a key association group (33) that is comprised of other members (22, 22a). The other members (22, 22a) have blinded keys (30). A blinded key (30) derived from the first secret key (28) of the first member (22, 22a) is transmitted to the key association group (33). Wherein, the first member (22, 22a) uses the blinded keys (30) received from the key association group (33) and the first secret key (28) to calculate an unblinded key of the first internal node. The unblinded key is used for encrypting data that is communicated between members (22, 22a) located on branches depending from the first internal node.
PCT/US2000/018583 1999-07-06 2000-07-06 Distributed group key management scheme for secure many-to-many communication WO2001003365A1 (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
DE60028972T DE60028972T2 (en) 1999-07-06 2000-07-06 METHOD OF DISTRIBUTING GROUP KEY MANAGEMENT FOR SAFE MORE TO MULTIPORT COMMUNICATION
JP2001508107A JP2003503950A (en) 1999-07-06 2000-07-06 Distributed group key management scheme for secure many-to-many communication
EP00947097A EP1192751B1 (en) 1999-07-06 2000-07-06 Distributed group key management scheme for secure many-to-many communication

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US14249099P 1999-07-06 1999-07-06
US60/142,490 1999-07-06
US09/439,426 1999-11-11
US09/439,426 US6240188B1 (en) 1999-07-06 1999-11-11 Distributed group key management scheme for secure many-to-many communication

Publications (2)

Publication Number Publication Date
WO2001003365A1 WO2001003365A1 (en) 2001-01-11
WO2001003365A8 true WO2001003365A8 (en) 2001-07-12

Family

ID=26840140

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2000/018583 WO2001003365A1 (en) 1999-07-06 2000-07-06 Distributed group key management scheme for secure many-to-many communication

Country Status (7)

Country Link
US (1) US6240188B1 (en)
EP (1) EP1192751B1 (en)
JP (1) JP2003503950A (en)
KR (1) KR100495540B1 (en)
CN (1) CN1160898C (en)
DE (1) DE60028972T2 (en)
WO (1) WO2001003365A1 (en)

Families Citing this family (176)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6901509B1 (en) 1996-05-14 2005-05-31 Tumbleweed Communications Corp. Apparatus and method for demonstrating and confirming the status of a digital certificates and other data
US5903651A (en) * 1996-05-14 1999-05-11 Valicert, Inc. Apparatus and method for demonstrating and confirming the status of a digital certificates and other data
GB2353682B (en) 1999-07-15 2004-03-31 Nds Ltd Key management for content protection
IL130963A (en) 1999-07-15 2006-04-10 Nds Ltd Key management for content protection
GB2394629B (en) * 1999-07-15 2004-06-09 Nds Ltd Key management for content protection
US7953671B2 (en) * 1999-08-31 2011-05-31 American Express Travel Related Services Company, Inc. Methods and apparatus for conducting electronic transactions
US7343351B1 (en) 1999-08-31 2008-03-11 American Express Travel Related Services Company, Inc. Methods and apparatus for conducting electronic transactions
US6289455B1 (en) * 1999-09-02 2001-09-11 Crypotography Research, Inc. Method and apparatus for preventing piracy of digital content
US7181014B1 (en) 1999-09-10 2007-02-20 Cisco Technology, Inc. Processing method for key exchange among broadcast or multicast groups that provides a more efficient substitute for Diffie-Hellman key exchange
US7260716B1 (en) 1999-09-29 2007-08-21 Cisco Technology, Inc. Method for overcoming the single point of failure of the central group controller in a binary tree group key exchange approach
US6987855B1 (en) 1999-09-10 2006-01-17 Cisco Technology, Inc. Operational optimization of a shared secret Diffie-Hellman key exchange among broadcast or multicast groups
US6684331B1 (en) 1999-12-22 2004-01-27 Cisco Technology, Inc. Method and apparatus for distributing and updating group controllers over a wide area network using a tree structure
US7013389B1 (en) 1999-09-29 2006-03-14 Cisco Technology, Inc. Method and apparatus for creating a secure communication channel among multiple event service nodes
US7434046B1 (en) * 1999-09-10 2008-10-07 Cisco Technology, Inc. Method and apparatus providing secure multicast group communication
US7103185B1 (en) * 1999-12-22 2006-09-05 Cisco Technology, Inc. Method and apparatus for distributing and updating private keys of multicast group managers using directory replication
US7391865B2 (en) * 1999-09-20 2008-06-24 Security First Corporation Secure data parser method and system
US7089211B1 (en) * 2000-01-12 2006-08-08 Cisco Technology, Inc. Directory enabled secure multicast group communications
US6738900B1 (en) * 2000-01-28 2004-05-18 Nortel Networks Limited Method and apparatus for distributing public key certificates
US7505599B2 (en) 2000-04-06 2009-03-17 Sony Corporation Information processing system and method for managing encrypted data with tag information
JP2001352321A (en) * 2000-04-06 2001-12-21 Sony Corp Information processing system, information processing method, and information recording medium, and program providing medium
JP4622064B2 (en) 2000-04-06 2011-02-02 ソニー株式会社 Information recording apparatus, information reproducing apparatus, information recording method, information reproducing method, information recording medium, and program providing medium
JP4023083B2 (en) * 2000-04-06 2007-12-19 ソニー株式会社 Information processing system, information processing method, information recording medium, and program providing medium
JP2001358707A (en) * 2000-06-15 2001-12-26 Sony Corp Information processing system and method using cryptographic key block and program providing medium
WO2001099331A1 (en) * 2000-06-15 2001-12-27 Sony Corporation System and method for processing information using encryption key block
US20020013823A1 (en) * 2000-06-16 2002-01-31 Eubanks Thomas Marshall Multicast peering in multicast points of presence (MULTIPOPs) network - neutral multicast internet exchange
US7346169B2 (en) * 2000-06-21 2008-03-18 Sony Corporation Information processing device and method
US7162199B1 (en) * 2000-06-23 2007-01-09 Lockheed Martin Corporation Method for real-time team coordination with unrealiable communications between team members
US6941457B1 (en) * 2000-06-30 2005-09-06 Cisco Technology, Inc. Establishing a new shared secret key over a broadcast channel for a multicast group based on an old shared secret key
JP4608749B2 (en) * 2000-07-24 2011-01-12 ソニー株式会社 Data processing apparatus, data processing method, license system, and program providing medium
US8370507B1 (en) * 2000-09-13 2013-02-05 Rockstar Bidco Lp System, device, and method for receiver access control in an internet television
WO2002033883A2 (en) * 2000-10-18 2002-04-25 Koninklijke Philips Electronics N.V. Generation of a common encryption key
US20020076204A1 (en) * 2000-12-18 2002-06-20 Toshihisa Nakano Key management device/method/program, recording medium, reproducing device/method, recording device, and computer-readable, second recording medium storing the key management program for copyright protection
JP4078802B2 (en) * 2000-12-26 2008-04-23 ソニー株式会社 Information processing system, information processing method, information processing apparatus, information recording medium, and program recording medium
JP4581246B2 (en) * 2000-12-26 2010-11-17 ソニー株式会社 Information processing system, information processing method, and program recording medium
JP4710132B2 (en) * 2000-12-26 2011-06-29 ソニー株式会社 Information processing system, information processing method, and program recording medium
AU1547402A (en) * 2001-02-09 2002-08-15 Sony Corporation Information processing method/apparatus and program
US20020150097A1 (en) * 2001-02-21 2002-10-17 Wei Yen Method and apparatus for secured multicasting
TW569119B (en) * 2001-03-29 2004-01-01 Sony Corp Data processing device
US7043024B1 (en) * 2001-04-18 2006-05-09 Mcafee, Inc. System and method for key distribution in a hierarchical tree
US7590247B1 (en) * 2001-04-18 2009-09-15 Mcafee, Inc. System and method for reusable efficient key distribution
JP2002319932A (en) * 2001-04-19 2002-10-31 Sony Corp Device and method for recording information, device and method for reproducing information, and program
US7096356B1 (en) * 2001-06-27 2006-08-22 Cisco Technology, Inc. Method and apparatus for negotiating Diffie-Hellman keys among multiple parties using a distributed recursion approach
US7463739B2 (en) * 2001-08-02 2008-12-09 Safenet, Inc. Method and system providing improved security for the transfer of root keys
US7664840B2 (en) * 2001-09-13 2010-02-16 Network Foundation Technologies, Llc Systems for distributing data over a computer network and methods for arranging nodes for distribution of data over a computer network
JP3864247B2 (en) * 2001-10-19 2006-12-27 インターナショナル・ビジネス・マシーンズ・コーポレーション Network system, terminal device, information distribution method and decoding method
US7334125B1 (en) 2001-11-27 2008-02-19 Cisco Technology, Inc. Facilitating secure communications among multicast nodes in a telecommunications network
US8006280B1 (en) 2001-12-12 2011-08-23 Hildebrand Hal S Security system for generating keys from access rules in a decentralized manner and methods therefor
US7178033B1 (en) 2001-12-12 2007-02-13 Pss Systems, Inc. Method and apparatus for securing digital assets
US7930756B1 (en) 2001-12-12 2011-04-19 Crocker Steven Toye Multi-level cryptographic transformations for securing digital assets
US7260555B2 (en) 2001-12-12 2007-08-21 Guardian Data Storage, Llc Method and architecture for providing pervasive security to digital assets
US7921450B1 (en) 2001-12-12 2011-04-05 Klimenty Vainstein Security system using indirect key generation from access rules and methods therefor
US10360545B2 (en) 2001-12-12 2019-07-23 Guardian Data Storage, Llc Method and apparatus for accessing secured electronic data off-line
US7921284B1 (en) 2001-12-12 2011-04-05 Gary Mark Kinghorn Method and system for protecting electronic data in enterprise environment
US7681034B1 (en) 2001-12-12 2010-03-16 Chang-Ping Lee Method and apparatus for securing electronic data
US10033700B2 (en) 2001-12-12 2018-07-24 Intellectual Ventures I Llc Dynamic evaluation of access rights
US8065713B1 (en) 2001-12-12 2011-11-22 Klimenty Vainstein System and method for providing multi-location access management to secured items
US7478418B2 (en) * 2001-12-12 2009-01-13 Guardian Data Storage, Llc Guaranteed delivery of changes to security policies in a distributed system
US7783765B2 (en) * 2001-12-12 2010-08-24 Hildebrand Hal S System and method for providing distributed access control to secured documents
USRE41546E1 (en) 2001-12-12 2010-08-17 Klimenty Vainstein Method and system for managing security tiers
US7921288B1 (en) 2001-12-12 2011-04-05 Hildebrand Hal S System and method for providing different levels of key security for controlling access to secured items
US7380120B1 (en) 2001-12-12 2008-05-27 Guardian Data Storage, Llc Secured data format for access control
US7565683B1 (en) 2001-12-12 2009-07-21 Weiqing Huang Method and system for implementing changes to security policies in a distributed security system
US7950066B1 (en) 2001-12-21 2011-05-24 Guardian Data Storage, Llc Method and system for restricting use of a clipboard application
US7340603B2 (en) 2002-01-30 2008-03-04 Sony Corporation Efficient revocation of receivers
US8176334B2 (en) 2002-09-30 2012-05-08 Guardian Data Storage, Llc Document security system that permits external users to gain access to secured files
US7673136B2 (en) * 2002-02-26 2010-03-02 Stewart Ian A Method for secure multicast repeating on the public Internet
CA2477571C (en) * 2002-03-27 2016-04-26 British Telecommunications Public Limited Company Key management protocol
US7092527B2 (en) * 2002-04-18 2006-08-15 International Business Machines Corporation Method, system and program product for managing a size of a key management block during content distribution
US8613102B2 (en) 2004-03-30 2013-12-17 Intellectual Ventures I Llc Method and system for providing document retention using cryptography
US7140040B2 (en) * 2002-04-25 2006-11-21 International Business Machines Corporation Protecting wireless local area networks from intrusion by eavesdropping on the eavesdroppers and dynamically reconfiguring encryption upon detection of intrusion
TWI246298B (en) * 2002-04-30 2005-12-21 Ibm Cryptographic communication system, key distribution server and terminal device constituting the system, and method for sharing key
US7400732B2 (en) * 2002-07-25 2008-07-15 Xerox Corporation Systems and methods for non-interactive session key distribution with revocation
US7512810B1 (en) 2002-09-11 2009-03-31 Guardian Data Storage Llc Method and system for protecting encrypted files transmitted over a network
US7486795B2 (en) * 2002-09-20 2009-02-03 University Of Maryland Method and apparatus for key management in distributed sensor networks
US7836310B1 (en) 2002-11-01 2010-11-16 Yevgeniy Gutnik Security system that uses indirect password-based encryption
US7346771B2 (en) * 2002-11-13 2008-03-18 Nokia Corporation Key distribution across networks
US7890990B1 (en) 2002-12-20 2011-02-15 Klimenty Vainstein Security system with staging capabilities
BRPI0406777B1 (en) * 2003-01-15 2017-12-26 Matsushita Electric Ind Co Ltd content protection system, key data generation device and terminal device
US7062048B2 (en) 2003-01-27 2006-06-13 Wegener Communications, Inc. Apparatus and method for single encryption with multiple authorization of distributed content data
US8707034B1 (en) 2003-05-30 2014-04-22 Intellectual Ventures I Llc Method and system for using remote headers to secure electronic files
US7532622B2 (en) * 2003-06-16 2009-05-12 National University Of Singapore Methods, devices and software for merging multicast groups in a packet switched network
US7206411B2 (en) 2003-06-25 2007-04-17 Wegener Communications, Inc. Rapid decryption of data by key synchronization and indexing
WO2005009019A2 (en) * 2003-07-16 2005-01-27 Skype Limited Peer-to-peer telephone system and method
US7197508B1 (en) * 2003-07-25 2007-03-27 Brown Iii Frederick R System and method for obtaining, evaluating, and reporting market information
US20050031119A1 (en) * 2003-08-04 2005-02-10 Yuying Ding Method and communications device for secure group communication
US20050036623A1 (en) * 2003-08-15 2005-02-17 Ming-Jye Sheu Methods and apparatus for distribution of global encryption key in a wireless transport network
CN100359968C (en) * 2003-09-19 2008-01-02 华为技术有限公司 Method for changing group key in group system
CN100344183C (en) * 2003-09-19 2007-10-17 华为技术有限公司 Group system group key managing method
US7703140B2 (en) 2003-09-30 2010-04-20 Guardian Data Storage, Llc Method and system for securing digital assets using process-driven security policies
US8127366B2 (en) 2003-09-30 2012-02-28 Guardian Data Storage, Llc Method and apparatus for transitioning between states of security policies used to secure electronic documents
US20050100166A1 (en) * 2003-11-10 2005-05-12 Parc Inc. Systems and methods for authenticating communications in a network medium
KR101044937B1 (en) 2003-12-01 2011-06-28 삼성전자주식회사 Home network system and method thereof
US7328343B2 (en) * 2004-03-10 2008-02-05 Sun Microsystems, Inc. Method and apparatus for hybrid group key management
US8209537B2 (en) * 2004-03-30 2012-06-26 Hewlett-Packard Development Company, L.P. Secure information distribution between nodes (network devices)
JP4606055B2 (en) * 2004-04-21 2011-01-05 株式会社バッファロー Encryption key setting system, access point, and encryption key setting method
US8249258B2 (en) * 2004-06-07 2012-08-21 National Institute Of Information And Communications Technology Communication method and communication system using decentralized key management scheme
US8369527B2 (en) * 2004-06-24 2013-02-05 International Business Machines Corporation Access control over multicast
US7707427B1 (en) 2004-07-19 2010-04-27 Michael Frederick Kenrich Multi-level file digests
KR100657273B1 (en) * 2004-08-05 2006-12-14 삼성전자주식회사 Rekeying Method in secure Group in case of user-join and Communicating System using the same
US8594323B2 (en) * 2004-09-21 2013-11-26 Rockstar Consortium Us Lp Method and apparatus for generating large numbers of encryption keys
CN101375284B (en) 2004-10-25 2012-02-22 安全第一公司 Secure data parser method and system
US7434047B2 (en) * 2004-12-30 2008-10-07 Nokia, Inc. System, method and computer program product for detecting a rogue member in a multicast group
WO2006077803A1 (en) * 2005-01-21 2006-07-27 Mitsubishi Denki Kabushiki Kaisha Key storage device, key storage method, and program
US7813510B2 (en) * 2005-02-28 2010-10-12 Motorola, Inc Key management for group communications
US7474618B2 (en) * 2005-03-02 2009-01-06 Objective Interface Systems, Inc. Partitioning communication system
KR100717005B1 (en) * 2005-04-06 2007-05-10 삼성전자주식회사 Method and apparatus for determining revocation key, and method and apparatus for decrypting thereby
KR100629495B1 (en) 2005-07-23 2006-09-28 삼성전자주식회사 Method for generating group key
ATE492956T1 (en) * 2005-09-06 2011-01-15 Nero Ag METHOD AND DEVICE FOR DETERMINING A COMMUNICATION KEY BETWEEN A FIRST COMMUNICATION PARTNER AND A SECOND COMMUNICATION PARTNER USING A THIRD PARTY
JP5014608B2 (en) * 2005-09-30 2012-08-29 富士通株式会社 Group communication method, utilization device and management device
FR2895177B1 (en) * 2005-12-20 2008-06-13 Eads Telecom Soc Par Actions S SHARING A SECRET ELEMENT
CN101043334B (en) * 2005-12-23 2011-09-07 国际商业机器公司 Method and device of encryption and data certification and decryption and data authenticity validating
CN100438614C (en) * 2006-02-16 2008-11-26 清华大学深圳研究生院 Method for realizing distributing asymmetric video conference safety system
KR100746037B1 (en) 2006-02-28 2007-08-06 삼성전자주식회사 Method and apparatus for configuring key of groups included in domain
FR2899748B1 (en) * 2006-04-07 2008-11-28 Thales Sa EFFICIENT HYBRID DIFFUSION SCHEME, ADAPTED TO LOW BANDWIDTH
EP2036300B1 (en) * 2006-06-22 2019-09-18 Koninklijke Philips N.V. Hierarchical and deterministic system and method for predistribution of key pairs
US8086850B2 (en) * 2006-06-23 2011-12-27 Honeywell International Inc. Secure group communication among wireless devices with distributed trust
KR101285597B1 (en) * 2006-06-29 2013-07-15 삼성전자주식회사 Method of updating group key and group key update device using the same
KR101223499B1 (en) * 2006-09-27 2013-01-18 삼성전자주식회사 Method of updating group key and group key update device using the same
US7860244B2 (en) * 2006-12-18 2010-12-28 Sap Ag Secure computation of private values
US8059819B2 (en) * 2007-01-17 2011-11-15 Panasonic Electric Works Co., Ltd. Systems and methods for distributing updates for a key at a maximum rekey rate
US8588420B2 (en) * 2007-01-18 2013-11-19 Panasonic Corporation Systems and methods for determining a time delay for sending a key update request
US7840810B2 (en) * 2007-01-18 2010-11-23 Panasonic Electric Works Co., Ltd. Systems and methods for rejoining a second group of nodes with a first group of nodes using a shared group key
JP2008236377A (en) * 2007-03-20 2008-10-02 Sony Corp Key providing system, device, and method, terminal device, and key generating method
KR101362529B1 (en) 2007-03-27 2014-02-14 재단법인서울대학교산학협력재단 Method and system for distributing and redistributing secret
KR101099814B1 (en) * 2007-07-11 2011-12-27 도시바 솔루션 가부시끼가이샤 GROUP SIGNATURE SYSTEM, DEVICE, AND Recording medium
KR100938262B1 (en) 2007-07-18 2010-01-22 한국전자통신연구원 Method for predistributing secret key
CN102932136B (en) 2007-09-14 2017-05-17 安全第一公司 Systems and methods for managing cryptographic keys
FR2921530A1 (en) * 2007-09-20 2009-03-27 France Telecom Cryptographic key generating method for company, involves generating cryptographic key associated with subgroup using public information associated with parent subgroup when determined number is greater than or equal to two
AU2014201692B2 (en) * 2008-02-22 2016-05-26 Security First Corp. Systems and Methods for Secure Workgroup Management and Communication
EP2416541A1 (en) 2008-02-22 2012-02-08 Security First Corporation Systems and methods for secure workgroup management and communication
JP4764447B2 (en) * 2008-03-19 2011-09-07 株式会社東芝 Group signature system, apparatus and program
US20090257593A1 (en) * 2008-04-10 2009-10-15 Comverse Ltd. Method and apparatus for secure messaging
US20100050204A1 (en) * 2008-08-22 2010-02-25 King-Hang Wang User group assignment method for key management
JP5637990B2 (en) * 2008-09-17 2014-12-10 コーニンクレッカ フィリップス エヌ ヴェ Method, communication apparatus and system for communicating in network
RU2536362C2 (en) * 2008-10-06 2014-12-20 Конинклейке Филипс Электроникс Н.В. Network operation method, system control device, network and computer programme for said control
CN101488849B (en) * 2009-02-18 2010-12-01 华南理工大学 Group key management method base spherical surface in N dimension
US8325924B2 (en) * 2009-02-19 2012-12-04 Microsoft Corporation Managing group keys
US8983066B2 (en) * 2009-02-27 2015-03-17 Cisco Technology, Inc. Private pairwise key management for groups
US8254978B2 (en) * 2009-04-02 2012-08-28 Qualcomm Incorporated Methods and systems for fast power control(FPC) message broadcasting in WiMAX systems
CN101562519B (en) * 2009-05-27 2011-11-30 广州杰赛科技股份有限公司 Digital certificate management method of user packet communication network and user terminal for accessing into user packet communication network
US8254580B2 (en) * 2009-09-30 2012-08-28 Telefonaktiebolaget L M Ericsson (Publ) Key distribution in a hierarchy of nodes
CN101674179B (en) * 2009-10-10 2011-06-01 西安西电捷通无线网络通信股份有限公司 Method for predistributing and establishing key of sensor network
KR101099851B1 (en) 2010-03-03 2011-12-28 서울대학교산학협력단 System and method for batch rekeying
AU2011235075B2 (en) 2010-03-31 2015-10-01 Security First Corp. Systems and methods for securing data in motion
US8601498B2 (en) 2010-05-28 2013-12-03 Security First Corp. Accelerator system for use with secure data storage
WO2012040231A2 (en) 2010-09-20 2012-03-29 Orsini Rick L Systems and methods for secure data sharing
ES2386627B1 (en) * 2010-10-22 2013-06-11 Telefónica, S.A. METHOD AND SYSTEM FOR THE ASYNCHRONOUS AND NOT REPORTED COGENERATION OF SECRET CRYPTOGRAPHIC KEYS IN SPACEALLY DISTINGUISHED LOCATIONS THROUGH A DISTRIBUTED SYSTEM.
US9369448B2 (en) * 2011-06-01 2016-06-14 Broadcom Corporation Network security parameter generation and distribution
US9185191B2 (en) 2011-06-16 2015-11-10 Mediatek Inc. Unified network architecture based on medium access control abstraction sub-layer
EP2742463A4 (en) 2011-08-08 2015-04-15 Mikoh Corp Radio frequency identification technology incorporating cryptographics
US9197700B2 (en) * 2013-01-18 2015-11-24 Apple Inc. Keychain syncing
US20150026465A1 (en) * 2013-07-18 2015-01-22 Alcatel Lucent Methods And Devices For Protecting Private Data
US9806897B2 (en) 2013-09-17 2017-10-31 Cisco Technology, Inc. Bit indexed explicit replication forwarding optimization
US9438432B2 (en) 2013-09-17 2016-09-06 Cisco Technology, Inc. Bit indexed explicit replication packet encapsulation
US10003494B2 (en) 2013-09-17 2018-06-19 Cisco Technology, Inc. Per-prefix LFA FRR with bit indexed explicit replication
US10218524B2 (en) 2013-09-17 2019-02-26 Cisco Technology, Inc. Bit indexed explicit replication for layer 2 networking
US10461946B2 (en) * 2013-09-17 2019-10-29 Cisco Technology, Inc. Overlay signaling for bit indexed explicit replication
US9942053B2 (en) 2013-09-17 2018-04-10 Cisco Technology, Inc. Bit indexed explicit replication using internet protocol version 6
US11451474B2 (en) 2013-09-17 2022-09-20 Cisco Technology, Inc. Equal cost multi-path with bit indexed explicit replication
US9544230B2 (en) 2013-09-17 2017-01-10 Cisco Technology, Inc. Migration support for bit indexed explicit replication
EP2913955A1 (en) * 2014-02-28 2015-09-02 Gemalto SA Method to authenticate two devices to establish a secure channel
US9906378B2 (en) 2015-01-27 2018-02-27 Cisco Technology, Inc. Capability aware routing
US10341221B2 (en) 2015-02-26 2019-07-02 Cisco Technology, Inc. Traffic engineering for bit indexed explicit replication
US10447624B2 (en) * 2016-05-09 2019-10-15 Quazi Shamim Islam Method for streamlining communications between groups of primary and secondary users, wherein communication capabilities between primary and secondary users are based on whether the user is a primary or secondary user
US10630743B2 (en) 2016-09-23 2020-04-21 Cisco Technology, Inc. Unicast media replication fabric using bit indexed explicit replication
US10637675B2 (en) 2016-11-09 2020-04-28 Cisco Technology, Inc. Area-specific broadcasting using bit indexed explicit replication
US10447496B2 (en) 2017-03-30 2019-10-15 Cisco Technology, Inc. Multicast traffic steering using tree identity in bit indexed explicit replication (BIER)
US10164794B2 (en) 2017-04-28 2018-12-25 Cisco Technology, Inc. Bridging of non-capable subnetworks in bit indexed explicit replication
CN108063756B (en) 2017-11-21 2020-07-03 阿里巴巴集团控股有限公司 Key management method, device and equipment
US11601263B2 (en) 2018-05-16 2023-03-07 Lg Electronics Inc. Systems and methods for efficient key management in a vehicular intranet
US11178712B2 (en) 2018-10-02 2021-11-16 Deere & Company Systems and methods to establish secure vehicle networks
US11082406B2 (en) * 2018-11-29 2021-08-03 Secret Double Octopus Ltd System and method for providing end-to-end security of data and metadata
CN110519708B (en) * 2019-08-27 2021-08-10 深圳成谷科技有限公司 Point-to-multipoint communication method and device based on PC5 interface
US11416473B2 (en) 2019-12-20 2022-08-16 Oracle International Corporation Using path encoding method and relational set operations for search and comparison of hierarchial structures
KR102094705B1 (en) * 2020-01-17 2020-03-30 주식회사 에프엔에스벨류 A multi-node authentication method and apparatus based on block chain
US11888824B2 (en) * 2021-12-31 2024-01-30 Huawei Technologies Co., Ltd. Methods, apparatuses, and computer-readable storage media for secure end-to-end group messaging among devices using dynamic grouping

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5036518A (en) * 1988-11-02 1991-07-30 Tseung Lawrence C N Guaranteed reliable broadcast network
US5109384A (en) * 1988-11-02 1992-04-28 Tseung Lawrence C N Guaranteed reliable broadcast network
IL106796A (en) * 1993-08-25 1997-11-20 Algorithmic Res Ltd Broadcast encryption
US5831975A (en) * 1996-04-04 1998-11-03 Lucent Technologies Inc. System and method for hierarchical multicast routing in ATM networks
US5748736A (en) * 1996-06-14 1998-05-05 Mittra; Suvo System and method for secure group communications via multicast or broadcast
US6049878A (en) * 1998-01-20 2000-04-11 Sun Microsystems, Inc. Efficient, secure multicasting with global knowledge

Also Published As

Publication number Publication date
KR100495540B1 (en) 2005-06-16
EP1192751A1 (en) 2002-04-03
CN1160898C (en) 2004-08-04
US6240188B1 (en) 2001-05-29
CN1363160A (en) 2002-08-07
KR20020037022A (en) 2002-05-17
DE60028972D1 (en) 2006-08-03
EP1192751A4 (en) 2003-08-06
JP2003503950A (en) 2003-01-28
EP1192751B1 (en) 2006-06-21
WO2001003365A1 (en) 2001-01-11
DE60028972T2 (en) 2006-11-16

Similar Documents

Publication Publication Date Title
WO2001003365A8 (en) Distributed group key management scheme for secure many-to-many communication
DK0697154T3 (en) Procedure for rekeying multiple communication groups through the air
GB2296413B (en) A method of messaging in a communciation system
WO1999027654A3 (en) Method and system for securely transferring a data set in a data communications system
AU684112B2 (en) Apparatus and method for securing communication systems
CA2169746A1 (en) Method for Key Distribution Using Quantum Cryptography
EP0840476A3 (en) Encrypted communication system that limits the damage caused when a secret key has been leaked
AU5517990A (en) A method for utilizing an encrypted key as a key indentifier in a data packet in a computer network
AU634302B2 (en) Secure communication network
EP1035684A3 (en) Cryptographic communication system
WO2007123869A3 (en) Key management and user authentication for quantum cryptography networks
YU49340B (en) Mechanism for matching a receiver with a security module
AU3352000A (en) Multiple level public key hierarchy for performance and high security
MY125905A (en) Electronic access control system and method
AU2001290370A1 (en) Battery monitoring network
AUPP752398A0 (en) Secure multi-point data transfer system
WO2002039660A3 (en) Cryptographic communications using locally generated cryptographic keys for conditional access
SE9503343L (en) Method for encrypting information
CA2056886A1 (en) Method for secure communication
WO1996018269A3 (en) Automatic radio group rekeying method
EA200100093A1 (en) METHOD AND DEVICE FOR CRYPTOGRAPHIC DATA TRANSMISSION
WO1998047258A3 (en) Bilateral authentication and encryption system
CA2240700A1 (en) Private broadcast communications
CA2272505A1 (en) Method for providing secure transmission of information
WO1998020645A3 (en) Improved tri-signature security architecture systems and methods

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): CN JP KR US

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
AK Designated states

Kind code of ref document: C1

Designated state(s): CN JP KR US

AL Designated countries for regional patents

Kind code of ref document: C1

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE

CFP Corrected version of a pamphlet front page
CR1 Correction of entry in section i

Free format text: PAT. BUL. 02/2001 UNDER (30) REPLACE THE EXISTING TEXT BY "60/142490, 06.07.99, US 09/439426, 11.11.99, US" AND UNDER (63) REPLACE THE EXISTING TEXT BY "US, 09/439426 (CON) FILED ON 11.11.99"

WWE Wipo information: entry into national phase

Ref document number: 2000947097

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 1020027000207

Country of ref document: KR

WWE Wipo information: entry into national phase

Ref document number: 008102805

Country of ref document: CN

WWP Wipo information: published in national office

Ref document number: 2000947097

Country of ref document: EP

WWP Wipo information: published in national office

Ref document number: 1020027000207

Country of ref document: KR

WWG Wipo information: grant in national office

Ref document number: 1020027000207

Country of ref document: KR

WWG Wipo information: grant in national office

Ref document number: 2000947097

Country of ref document: EP