FAST MULTICAST MESSAGING ENCRYPTION AND AUTHENTICATION

摘要

To prevent legitimate message recipients from forging new messages and to encrypt messages for a specific set of recipients (channel), a root key is encrypted and combined with a base session management key to render a combined root key, which in turn is encrypted with a public key of at least one recipient device render a session management key. The public key of each “N” intended recipient device encrypts the combined root key to render “N” session management keys. The session management keys are then combined with the combined root key to render a multicast root key, which is signed with a private key of a sending device. The signed multicast root key is combined with the session management keys to render an encrypted, signed multicast root key that is used to encrypt digital information prior to transmitting the digital information.

主权项

1. A sender device comprising:
at least one computer memory that is not a transitory signal and that comprises instructions executable by at least one processor to: access a root key; encrypt the root key with a root session management key (RSMK) to render an encrypted root key; encrypt the RSMK with a public key of at least a first recipient device to render a first device session management key (DSMK); concatenate the first DSMK and the encrypted root key to render a concatenation; sign the concatenation to render a signed root key blob; and distribute the signed root key blob to at least the first receiver for use in securely exchanging digital information.